OK, So it seems in addition to just getting into my account, the attached an Authenticator to the account and used it to take back control after I had been restored. Blizz has changed my account name, reset everything and all I have to do is follow the steps to set up a PW.

Before I do that I am running everything I can think of to sweep my system.

Norton 360 (Virus + Spyware)

Windows Defender (Spyware + smoe Virus)

Adaware (spyware)

Process scanner (identify whats running)

Security Task Manager (in depth task analysys)



If anyone has anymore suggestions please let me know here as I want to be very sure I am good before I set up the new account for the first time.


Trab

There is an antivirus called avira
If you are spending, I have read that it's one of the best there is and worth the money.

Make a dummy email just for wow. That's what I did to and reset my passwords on my other email accounts. Yahoo is simple enough or some other free email. I never use my dummy email for anything but wow and it seems the way to go. Least that's what they told me when I got hacked.

Good thing they didn't use a stolen CC to pay for the time on the account.. That's another ugly mess you don't want to deal with..

They did a paid char transfer on Trab and Fear, I can only assume they used a stolen CC for it. I caught it before they could get the toons off my account though.

This time I caught them while they were DE'ing all Fear's stuff. When I logged on he had a ton of enchanting mats, 15 gems bought with honor, and 20 WG Commendations ready to be used for honor and spent on gems.

I wish people would get a life. What I dont get, if they have a logger, why go after my WoW stuff and not my RL bank account? I do online banking all the time.

Also, I suppose its time for me to break down and get back on this site in the members section. (I promised Emma I would, even though thats what got me riled up last time)

Applying now

Get an authenticator if you don't have already. It's an extra security barrier and I'm sure they would rather hack into an account that doesn't have one.

Trab, I know I mentioned this in gchat the other day but I am going to hit you with some links.

This combination has kept me hack free for the entirety of my WOW time. I have never changed my password...not once in over 4 years. I have never been hacked.

Loggers usually come in as script (normally hidden in an ad on a webite) and the reason they target your WOW account instead of your banking information is that there is decent money in it (they sell the account as well as sell the gold they strip) and no one comes looking for them. It's similar to someone breaking into your car and stealing your ipod and stereo rather than breaking into your home. Cops don't care about ipods and stereos but they will put some effort into a home burglary.

Needless to say, own your account and never share your password even with a buddy. Not to say your bud might fuck you over but it's possible the "buddy" could be/become vulnerable to attack and expose you inadvertently.

Use these exclusively for the internet.

Firefox Link

Addons for Firefox:

Noscript Link This little puppy stops all those little programs from running on your pc unless you allow it to do so (it goes without saying, only allow scripts and websites you trust). This is one of the BEST free protection software you can have.

Keyscrambler Link Use the free edition...should you ever get a keylogger, all they will receive on their end is gibberish.

Adblock Plus Link Ads are usually where you get your loggers...block em. Who likes ads anyway? You can block specific ads or even the frames in which they appear stopping ALL ads that are framed there.

Another tip to thwart key-loggers is to cut and paste your passwords and account info from a notepad to their designated fields. Can't key-log when there are no keystrokes. Also, make sure your passwords don't contain dictionary type words...combine upper/lower case letters and numbers. My router password for my home system is 35 characters long, with a combination of upper/lower case letters and numbers...not one word decipherable.


In addition to Adaware (which is great) you should use more than one as they don't always catch the same thing.

I use adaware along with Malwarebytes Link and for free virus protection you can't beat AVG Link

Hope something in here helps you, good luck!

Thank you Mx, I am now following your links step by step. Hopefully I have done enough to keep this from happening again.

One thing...with Noscript, you are going to find that 99% of websites you visit need you to allow something to work properly (java usually). Noscript stops it all. Use your best judgment on what you allow and from whom. There will be a bar at the bottom of your browser with info on what is being allowed/not allowed and an Options button to tweak permission as you see fit.

Most websites have a ton of shit they try to run on you, while usually not dangerous they are also not necessary. Example that comes to mind is Google Analytics:

"Google Analytics is a free web analytics tool offering detailed visitor statistics. The tool can be used to track all the usual site activities: visits, page views, pages per visit, bounce rates and average time on site etc.
But it can also be used to specifically track Adsense traffic, therefore helping webmasters to optimize Adwords adverts based on where visitors come from, time on site, click path and geographic location."

Not dangerous but I personally don't like being a free statistic for anyone, let alone in order to throw customized advertisement back at me. Sorta makes you feel like you have a tracking beacon stapled to your ear courtesy of Jim Fowler from the old show "Wild Kingdom".

Give me a shout if you have any questions or need a hand setting things up.

The bad thing since they paid transferred your toons like they did to me is blizzard is going to disable your account when the person credit card that was used to pay for that stuff reports it stolen and files claim against blizzard.

May not happen right away but what happened to me was after a month after I got my account restored was they disabled my account and issued a charge back to my account. Meaning I was unable to play on it till I payed for the charges that we're used with the stolen card.

You will get emails from blizzard about this. Do Not handle this though emails as I did. They sent me an email back saying that I wasn't accountable because of the account had been hacked. But 2 weeks later the credit card pushed them again(I gather) and account got disabled once again.. Only to get another email and me sending another email copy and pasting the older email.

This happened 3 time in total.. The best thing to do if this happens is to call them directly.. I didn't at first because of the hour plus hold time there customer service has.. But its worth the wait. I finally got things all squared away last week after 4 account disables and 6 or so emails and 3 phone calls..

Yes hackers suck..

#2321786 Killasnail wrote:

I finally got things all squared away last week after 4 account disables and 6 or so emails and 3 phone calls..

Yes hackers suck..

Does... does that mean Killa is BACK??

Almost...

#2321986 Auzerais wrote:

Almost...