Account Hacks/Compromises Information

[tolstein]

So with the amount of people getting there accounts compromised/hacked/stolen. There are afew things that you can do pre-hack and post-hack:

Pre-Hack Prevention

Buy a Blizzard Authenticator
us.blizzard.com/support/article.xml?locale=en_US&articleId=24986

What Is a Blizzard Authenticator?

The Blizzard Authenticator is an optional tool that offers players with a World of Warcraft account or a Battle.net account an additional layer of security to help prevent unauthorized access. The Blizzard Authenticator provides you with a unique, one-time code to use in addition to your regular password. Log in and rest easy knowing that your account is now even more secure from unauthorized access.

Cost: $6.50

I opted for the hard token, versus the iphone/smart phone version. As if my phone gets hacked/stolen I don't have to worry about my WoW account.

Anti-Virus with Aniti Malware/Spyware Support

Kaspersky Internet Security (I use this)
usa.kaspersky.com/products_services/HomeProducts.php
Nod32
www.eset.com/products/nod32.php (Good 64-Bit Protection for Windows XP 64-Bit)

Daily/Weekly Scans
Scans of ALL add-ons
Use a clean source for all add-ons. Curse is a good source. Remember that nothing is 100% and you should still run scans even from trustworthy sources.

Post Hack Actions:

Contact Blizzard Immediately
If you feel your account has been compromised, please send an email to us at [e-mail] with your account name and details on your situation. Our Account Admin Team will reply back to you and help resolve the issue.

You may also reach us externally, using our webform: us.blizzard.com/support/webform-us.xml?gameId=11

Unfortunately for security reasons we will not be able to work with anyone other than the original account holder in these issues. Petitions from friends or Guildmates cannot be accepted. Please remember that although we will do our best to accommodate your request, restoration is not guaranteed.

Update all Security Software. Disconnect from Internet and run full scans until you are certain you are clean.

Delete all add-ons that you may think are suspicious.

Re-installing WoW is highly recommended along with all addons stored locally.


I have been compromised about 6 months ago and it sucks. Have patience and work with the Account Admin team and in-game GM's to do the restoration process.

It took me 2 days to get back in-game and about a full 5-6 days to get all my gear and money back, pretty much full restoration.

Be safe and surf safe!

[taallonn]

I use 3 programs to scan my computer, there is no 1 single program that will catch them all.

Spyware removal program, free
www.superantispyware.com/

Spybot Search and Destroy
www.safer-networking.org/en/index.html

AVG virus and spyware removal
free.avg.com/

[jenner]

Sept 19, 2009 15:41:31 GMT -5 taallonn said:

I use 3 programs to scan my computer, there is no 1 single program that will catch them all.

Spyware removal program, free
www.superantispyware.com/

Spybot Search and Destroy
www.safer-networking.org/en/index.html

AVG virus and spyware removal
free.avg.com/

Another good Program that Corbis Turned me on to, was at superantispyway.com you can download the full version for free, the only restriction to the freeware is that you can not schedule scans, you need to start them manually and this program has caught many things McAfee could not handle.

[qualchek]

Sept 19, 2009 15:41:31 GMT -5 taallonn said:

I use 3 programs to scan my computer, there is no 1 single program that will catch them all.

Spyware removal program, free
www.superantispyware.com/

Spybot Search and Destroy
www.safer-networking.org/en/index.html

AVG virus and spyware removal
free.avg.com/

I use AVG and spybot. Is that first one a good program as well?

[qualchek]

First off, how can one tell one's account has been hacked?

[fitz]

My account apparently has been hacked...

Apparetly the asshole used a trojan called wowthief. Im not sure where
i picked it up from but its placed in your downloader exe. Im currently
trying to get this matter resolved with blizz but it looks like it may take
a couple days. I audited my toons on be.imba and it looks like Fitz still has most of his gear. Fitzpatrick only had three items so im guessing the prick sold it all. i just hope you guys were able to figure out it wasnt me before he hit the guild bank up to hard.

[taallonn]

Sept 21, 2009 14:17:47 GMT -5 fitz said:

My account apparently has been hacked...

Apparetly the asshole used a trojan called wowthief. Im not sure where
i picked it up from but its placed in your downloader exe. Im currently
trying to get this matter resolved with blizz but it looks like it may take
a couple days. I audited my toons on be.imba and it looks like Fitz still has most of his gear. Fitzpatrick only had three items so im guessing the prick sold it all. i just hope you guys were able to figure out it wasnt me before he hit the guild bank up to hard.

Well, he wiped out the guild bank. But blizz has gotten most stuff back to Neve.

Lavar noticed the problem first, and when we saw what was happening, we booted all your toons figuring we could stop him from getting whatever else was left. So when you get back in game shoot someone a tell so we can reinvite you dude. We know it wasn't you man, and I hate that it happened but I am glad to finally be able to let you know what's goin on.

We let Blizz know something was up as soon as we could, but it was really late at night. Doric got hacked like 2 days after that, and has gotten all his stuff back and what the hacker took out of the bank on his acct too. Hope to see you back in game soon man

[therat]

If you need anything some one can start Therat back up and strip him, im sure if i eventualy come back to game you guys will help me catch back up

[qualchek]

Question about superantispyware. Is it normal for the computer to ask you to reset after deleteing things after scan?

[taallonn]

Sept 23, 2009 18:14:09 GMT -5 qualchek said:

Question about superantispyware. Is it normal for the computer to ask you to reset after deleteing things after scan?

If the scan found something that is in use, and can only be removed after a reboot, then yes

[jenner]

Sept 23, 2009 18:14:09 GMT -5 qualchek said:

Question about superantispyware. Is it normal for the computer to ask you to reset after deleteing things after scan?

it is not the norm, but as snap said, if it is something being used then yeah, you would have to reboot to get rid of it.

[beltegrity]

Hi everyone,

I haven't been playing for a long time now but I was just going through my favorites and figured I would stop by and saw this thread.

I am sorry to hear that someones account got hacked , that sucks. I just wanted to suggest another malware/spyware program that is one of my favorites I use along side Spybot and might help it's called Malwarebytes and can be downloaded at the following link if your interested.

download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol

I hope it all works out for everyone. Cheers!