Keylogged Twice Now... Help?

Nemesi · 03-13-07, 02:53 PM

In a nutshell, I was keylogged last week, they stole 1200 gold, and a ton if items. Since then I had deleted the addons I added that day, ORA2, KTM, BigWiggs, and had been changing my pass on a diff pc everytime before I logged out.

Seems last night, I got sloppy and watched TV for 30 mins without changing my pass. This time they disbanded my guild, stole 2.5k gold, and yet didnt seem to take any items.

This crap needs to stop, but I dont know how to track it down. I am currently in the process of reformating my PC, and resinstalling WoW once its done. I guess its simple, "don't use addons anymore". Well as most of us here, were addon addicted, I have one for every use, and I love them. What can I do to ensure my accounts safety, yet still use the addons I love?

Gristadar · 03-13-07, 03:04 PM

I received an email from wow last night during play that stated not to click on any web links that come up in the chat windows. This is how alot of keyloggers are being put on players computers to steal their passwords and their accounts

Nemesi · 03-13-07, 03:18 PM

Im a computer savvy person, I know better then to click outside links, or do anything stupid like that. My fear is maybe getting it from DLing an addon on Curse. I think the only one I get from that site anymore is KTM, the rest of my addons I download here, or straight from WoWAce.

trefaes · 03-13-07, 03:32 PM

It is simply not possible for an addon to function as a key logger or to even view your password in any way.
If you're absolutely positive it's a keylogger that's your problem, you've most likely got it from browsing unsafe sites with an unsafe browser, or through downloading something from somewhere which has installed it.

Saiiyna · 03-13-07, 03:33 PM

Originally Posted by Nemesi

Im a computer savvy person, I know better then to click outside links, or do anything stupid like that. My fear is maybe getting it from DLing an addon on Curse. I think the only one I get from that site anymore is KTM, the rest of my addons I download here, or straight from WoWAce.

Many of the Keyloggers come from ads on these addon sites. Use Firefox install addblock and stay away from ui.Worldofwar.net and you should be Okay. Also know what is supposed to be in you process list and check it frequently. If something new shows up then you may have a problem.

Saii

Gristadar · 03-13-07, 03:38 PM

Originally Posted by Saiiyna

Many of the Keyloggers come from ads on these addon sites. Use Firefox install addblock and stay away from ui.Worldofwar.net and you should be Okay. Also know what is supposed to be in you process list and check it frequently. If something new shows up then you may have a problem.

Saii

according to what wow told me, if its in your process list the game picks it up on login through their program Warden which runs when you start the game

Nayala · 03-13-07, 03:44 PM

You might also want to check out this post on the WoW forums. http://forums.worldofwarcraft.com/th...sid=1&pageNo=1

As the others have said it's probably not the addons that are installing a keylogger on your system. Your computer is getting exploited from another vector. Such as an webbrowser exploit or open socket on your computer. If you have a home network, you probably need to make sure all the machines on it are secure, especially if you have filesharing turned on because it's easy for mal-ware to move between machines that way. Also it's best to have multiple level of defenses against such programs because it's possible for programs to actively hide from certain scanners etc.

Nemesi · 03-13-07, 03:55 PM

Ya, as I said Im pretty safe when it comes to surfing the net, but who knows. Ive scanned with just about every program I could fine, and its coming up clean. Even though Ive reformated, I think Ill be moving my toon to a new account just incase the person has my account name and can use a password gen (guesser for simpler terms) to crack through it.

airdragon · 03-13-07, 04:27 PM

Make a password that can't be cracked. Its not to hard. Minimum 8 characters and no string of similar symbols larger than 3. Throw in a couple of capitalized letters as well to make it even harder.

Sepioth · 03-13-07, 05:35 PM

As stated here and Cairenn will prolly tell you to You can not get a virus of any sort from using the addons especially from here. There are no files that can even become keylogger. Everything here is tested and retested after an update to be 1000% virus free.

Also I don't think the ads here are an issue either. Unless the Girl Scouts (Cuurent ad on my screen) are selling viruses with their cookies

Simple thing is to be very cautious of websites. Run anti-virus software (I'm with comcast and get free Mcafee Virus and Firewall.) Maybe your provider has a similar program.

Hope everthing gets better for you. Good luck

KyesaRRi · 03-13-07, 06:12 PM

Bad Luck man

My second account that was active for about 1 - 1.5 years has had the same password since i opened the account and i have never been "Key logged"

I run XP MCE With the XOBLite Shell. I use the built in Windows Firewall, it looks to do the job great.
Firefox is my main internet browser, and NoScript is always active.

My AntiVirus is AntiVir, which i update every time i start my PC. I do a weekly scan with Lavasofts Ad-Aware. Any .torrent that i download is done either on my Xbox or my other PC, which is then scanned and transfered to this PC.

Every month [i havent done it recently] i scan my PC with Hijack This, then send the logfile to be checked out.

Fyro · 03-14-07, 08:10 AM

Originally Posted by airdragon

Make a password that can't be cracked. Its not to hard. Minimum 8 characters and no string of similar symbols larger than 3. Throw in a couple of capitalized letters as well to make it even harder.

Almost every player of Wow thinks that throwing capitalized letter in ur password would make it harder to brute force it. But the truth is that blizzard didn't programmed that in their security. Try it urself, change ur pasword so that it has capitalized and non capitalized letters in and try to login with CAPS on or with password entirely in small caps.

Bummer....

Blizzard should make their security for their customers and wow a whole lot better if u ask me...

Btw, some keyloggers are pretty smart. I recommend to instal a good firewall if u didn't have that already. If u had remove all programms that's in the list of allowed and not allowed to acces the internet. By this the firewall ask u wich programm can acces the internet or not. Mind the ip adress where it want's to connect to if don't trust a programm to acces the internet.

Basicly a common advise.. But appearently not mentioned here..

GL !!!

PathMaster · 03-14-07, 08:53 AM

For a free virii and malware check: Pandasoftware.com and use the ActiveScan.

Remember: No one product is 100% correct/safe. Use multiple products.

I use FireFox, Avast!, and nothing else. I also browse very safely.

flaska · 03-14-07, 09:54 AM

Originally Posted by PathMaster

I use FireFox, Avast!, and nothing else. I also browse very safely.

Word!
.

Lamoot · 03-14-07, 10:11 AM

http://www.safer-networking.org/en/mirrors/index.html

Thats a download to Spybot S&D. It will get rid of any keyloggers you have. I scan every night before i go to sleep, Works awesome.

Mizer18 · 03-14-07, 12:23 PM

Originally Posted by Lamoot

http://www.safer-networking.org/en/mirrors/index.html

Thats a download to Spybot S&D. It will get rid of any keyloggers you have. I scan every night before i go to sleep, Works awesome.

Did you make a profile just to say that?

Sepioth · 03-14-07, 08:31 PM

Originally Posted by Mizer18

Did you make a profile just to say that?

Gotta start somewhere.

Tasai · 03-14-07, 08:55 PM

I personally use Avast! Antivirus... It seems to pick up everything. When I tried downloading KLH Threatmeter from ui.worldofwar.net, it picked up a trojan. If you got that addon from that site, it was probably the culprit. The same addon from Curse showed nothing, so it's probably safe.

OekoMaelk · 03-23-07, 11:02 AM

hi first post here=P but been using ya wonderful site for long.
Never been keylogged in the almost 2 years i played.
i use SnD (search and destroy),Crapcleaner and Ofc Mozilla.
i know some that write their account name and password in a document then paste it to wow login screen, but not sure how safe that is`?
also just to be sure i hide my gold away on low level alts,, maybe they dont look there if i get robbed heeh , i hope=P

Btw thanks for A great site!

Mordikaiin · 04-08-07, 03:52 PM

Ok i read thru this post and it's quite funny to see some of the myths being tossed around in here, but i woudl like to say 2 things. One no matter what your password is a CRACK Program can Crack it...

Only True Encrypted passwords cannot be cracked. I used to make Crackers for Yahoo Users with some friends from a site called S3rial Killers, I think I know alot about this subject matter. No Matter is your Password is _HeLl0$ukk3rS_ or not any key on your keyboard showing up as normal text CAN be cracked. I have even built Crackers that crack passes with the num lock symbol & when i released that Cracker my name finally got cracked after 5 yrs of lamer free yahoo pwnage. same name from dayone never booted nor cracked unless testing stuff with friends.

As for programming a Keylogger to be used with a wow addon, YES it can be done, you can hex a trojan, keylogger, mps any pof that stuff into anything... Pictures, txt files, etc. etc. etc.! A scenario that is commonly used is someone sending you a Picture and low n behold that Picture is hexed to not be seen by firewalls and to give another person access to your computer. There is only ONE true safe way not to get infected and that is stay off the net, lol.

Although here are my suggestions on how not to get infected with anything.

1. Stay away from Porn Sites...
Yes I know us men are all Horny and wanna see hot lil girls doing hot little things, but everyone of them Sites is a Hacker Heaven andits so easy wannabe's can join in on the fun. For every thing of Spyware you have on your computer you have open ports it is using, them Open Ports make you Open to attack.

2. Download from one Site, if you get infected, notify the Site Owner and find another Site.

3. DO NOT ABSOLUTELY DO NOT, go to gold sites, especially not the lame ones being spammd in private 50 million f'n times a day. Gold Farmers should be shot anyway...
If you must go buy your gold and cheat then hey thats your paragative but go to a real site that has been around for years and is 100% Customer Gauranteed. It might be more expensive but you get what you pay for or in some of your cases LOSE what you paid for.

4. NEVER EVER Share Accts...
Not with Guildies, not with friends not with anyone. The reason why I say this is because you aren't that person you DO NOT know what they are thinking. Lets just say you and a buddy go to the bar, a girl hits on you he has a secret crush you didnt know about you go hoem with said hot chick, Buddy gets his revenge by Deleteing your **** and gets away with it, becaus eyou think you got keylogged.

5. DO NOT POWER LEVEL...
This goes with above, but is a different scenario. PL Company talks to you nicely and treats you cool, all along they are setting you up to entrust them a little more. Next thing you know you are approached and asked something alogn the lines liek hey do you mind if when you are not online if we farm with your character we will split the godl we farm with you. SOUNDS GREAT, yah ok! They tell you thank you and they don;t need your toon no more, you forget to change your password and they log in a few weeks later and take you ****. NOT TO MENTION POWER LEVELERS AND EBAYERS SUCK, you guys ruin the raid and cause whipes and more, level your own characters and learn how to play, or go play something that is not so menatlly challenging for you.

NOTE:
This Post is not directed to anyone in General, it is just a little reminde rof what people think of people who cheat and also a friendly gesture to help people keep their character. If you do any of the things that I have listed above, you mideswell just giev em your acct now lol, because you will lose it eventually.

:P