Seeking Help: One of my Accounts Hacked

[Qlimax]

Salutations,

Today I received an email of my first account that had the password reset. Somehow the person got into my email and then changed the password to his. I logged on that character and no items, no gold and stuck in Astrannar with no money (@ 28 ) >< to fly. I made the long walk back and changed the passwords on all accounts. I deleted all internet history files and ran mcafee, nothing found. I am very frightened at the thought of all my progress going in the drain, let alone the cost of it all (given that the hacker has my secret word because he had retrieved the password). Are there any other precautions I can take, if it was or wasnt a keylogger? Also, I do wish to recognize the fact of my usage of the term hacker, I am sorry if I offended anyone by the term, for I meant it as in malicious hacker, not one who is just talented with software.

On the same note, I found a lvl 6 hunter on the same server that had been leveled by the hacker, odd enough huh? Ill keep you posted to see if the password is changed again, but any suggestions to ridding the potential of the keylogger is greatly appreciated.

Qlimax

[Bollwerk]

backup important data and reformat the hard drive(s), then reinstall the OS, etc. That is by far the best way to make sure you get rid of something like that.

[Ifalna]

Use firefox and noscript for internet browsing, run manual adaware scans after installing each addon or downloading, reinstall now, contact Blizzard over the account to get the secret question changed and email address changed immediately. Keep in mind they will most likely lock down the account if they feel you did not adequately secure it, but can get to work restoring items.

Hackers just don't happen :S It was a keylogger, or the eventual conclusion of account sharing

[Jaws5]

Make sure you have a firewall , and good up to date spy, virus blocker. Do use your account on any other PCs. only yours

[geoffdavison]

I had my account hacked.. level 70 rogue.. never leveled up my lockpicking or mining... got it back.. lockpicking and mining maxed out.. and 3k gold... all my stuff pretty much sold off on alts..

I put in a GM ticket and got all of my stuff back.. and they took 800 gold from me.. cause thats all that was left

I would make sure you delete you Interface folder and WTF folder just to be sure...

[Oswyn]

I got my 3 70's hacked a long time ago after downloading an addon from a no-name site. My buddy got hacked at the same time and he downloaded the same addon. Just becareful what addons you put on the system and where you get it.

[Vyndree]

Most definitely file an in-game ticket about the hack ASAP, and either wipe the machine or unload all the anti-virus protection and scanning devices you can on it. (I prefer to just wipe the machine) Remember to include dates in your in-game ticket (i.e. I last used the account on <this> day and the password was changed on <this> day and I regained control of the account on <this> day) -- this can help the GM identify that indeed your account was not under your control if the hacker did anything nefarious while you were on it.

GMs can do restorations in order to get your gear/money back, but there will be an investigation involved and it will likely take a few weeks. Check the customer service forums (on a different computer, since you have to put your account name/password in there to log in) for help -- they have some stickies as well as GMs that can answer your questions.

Don't be surprised if you get a late ban for exploiting/spamming -- Blizzard often detects account compromise late and will ban the account for your (the original owner's) safety in case the hacker still has access to your account.

[Silly Gooooose]

I had my account hacked.. level 70 rogue.. never leveled up my lockpicking or mining... got it back.. lockpicking and mining maxed out.. and 3k gold... all my stuff pretty much sold off on alts..

I put in a GM ticket and got all of my stuff back.. and they took 800 gold from me.. cause thats all that was left

I would make sure you delete you Interface folder and WTF folder just to be sure...

My priest got hacked once. Kid farmed 2k gold in DM.

The account got suspended due to it being compromised, but I got it and the gold back.

[Qlimax]

I appreciate all your help, and I have taken the provided advice and applied it. I am currently in the process of trying to isolate the problem area, but I do believe I will 'wipe' the machine eventually. As a technically impaired individual, when you say 'wipe' the harddrive, do you mean reformat it and re-install the OS, or something else? I use McAfee Anti-Virus, Nvidia Firewall, System Mechanic and removed everything they could. Unforunately I had not downloaded any file, nor go to any questionable site, other than the website of the popular youtube character, Athene. This is the only thing I can think of that may have lead to the interceoption of the virus. Is there anyway to find out if I had removed it in the spyware, antivirus waves other than not getting "hacked" again? I greatly appreciate this, and I am sorry to the others who have had to experience this.
Qlimax

[Qlimax]

My priest got hacked once. Kid farmed 2k gold in DM.

The account got suspended due to it being compromised, but I got it and the gold back.

Did you reformat your harddrive or did you just hit it with antivirus and spyware?