Probability of Authenticator failing to save accounts?

[Multibocks]

After getting my accounts taken and finally got everything back I have noticed a troubling trend. This morning I got kicked from the server to the login screen. Now I have changed my email address, pw and added the authenticator. I also wiped my HD and installed a new operating system (win7).
This happened a few times this morning. The first time I just figured the server burped and kicked a few people. By the third time my hackles were raising. In all it happened four times. I haven't noticed anything missing on my guys, so I'm hoping that it's just my paranoia.
What I figure has happened, if anything is possible, is that I did not get rid of the trojan when I reformatted my HD. Now that they have my new login and pw they are just brute forcing my authenticator code. Is this possible?

[Littleburst]

After getting my accounts taken and finally got everything back I have noticed a troubling trend. This morning I got kicked from the server to the login screen. Now I have changed my email address, pw and added the authenticator. I also wiped my HD and installed a new operating system (win7).
This happened a few times this morning. The first time I just figured the server burped and kicked a few people. By the third time my hackles were raising. In all it happened four times. I haven't noticed anything missing on my guys, so I'm hoping that it's just my paranoia.
What I figure has happened, if anything is possible, is that I did not get rid of the trojan when I reformatted my HD. Now that they have my new login and pw they are just brute forcing my authenticator code. Is this possible?

Yes, plenty of people with authenticators still get hacked.

[Shodokan]

Google "wow authenticator hack" theres a DLL that hides in your computer you need to delete.

[Multibocks]

Google "wow authenticator hack" theres a DLL that hides in your computer you need to delete.

But emcor.dll is a man in the middle attack. Unless I googled it wrong. The problem I have is that minutes after I log into my guy I get booted to the login screen. Which is not the way man in the middle works. I'm just wondering if someone is trying to brute force my account since they have two of the three pieces needed to login.

[Zub]

hum.. the authenticator generated codes are only valid once, so if you manage to log on that code is gone and can't be reused..
can't see how they would login (and boot you out) without the authenticator *after you successfully logged in*
but then again, i don't know much.

brute forcing a 6 digit code would take a little while. Maybe go to another (clean) machine and change your pwd there.

[Multibocks]

I use my phone to access my account. However changing pw on it won't accomplish anything if they have a Trojan on my comp.

[Zub]

if it's a trojan, then the authenticator will take care of it
if it's a man in the middle, then you shouldn't be able to log in (iirc) as they'd snatch your details on the way to the server.

try and log in, but instead of typing your password correctly, type a variation (anagram) and then use the clipboard to move the correct letters in the right spot :-)
example, let's say your password is "multibocks", then type "ocksbultim" and copy paste the letters back in place (use the mouse to position them). i'd like to see a trojan log that.
and brute forcing 2 independent codes of 6+ characters should take some time >.<

if you still get disconnected, i reckon it's something else (network? addon? etc)
if you don't get dc'd, make sure you clean your machine well.
that's what i would try anyway.

[Grondir]

It's been happening to me on Steamwheedle Cartel EU quite often since last patch. Get random DC's and major lag problems sometimes, but other times it's fine.

Don't thinki you have a security issue mate

[Maxion]

It's been happening to me on Steamwheedle Cartel EU quite often since last patch. Get random DC's and major lag problems sometimes, but other times it's fine.

Don't thinki you have a security issue mate

I've been having this recently too.

[Silence]

If you still got a/the trojan on your PC they most definitely can try to brute force your authenticator code.

Blizzard has no auto-block feature that blocks your IP after you unsuccessfully tried to log in X times.

The chance of them hitting it is about as small as winning the lottery... but they can still be trying ;p

Either way you should make sure that your PC is clean by running decent programs to check it.

Never rely on just your authenticator to keep you safe.