Logged on yesterday and after entering my log on info, got a message that said my pw had been changed due to suspicious activity. After going to the link to reset my pw I logged on to find a level 1 toon that I didn't make. Then found that everything on all 6 toons was gone, along with all guild bank tabs worth of stuff. Then I got booted from WoW. Tried to log back in and got an "Incorrect PW". At this point I realized that someone had used pw recovery, accessed my yahoo to reset the pw again. I then changed my yahoo pw and did a recovery again. After a ticket Blizzard restored everything within an hour thankfully. I'm curious to how someone got my log in information. My wife and I are the only ones in the household. I have never used a power leveling service nor allowed anyone to play my toons? How in the f*ck did someone get my log in info? I ran AVG and Spyware and came up with nothing. Would one of those Authenticator things keep this from happening again?
Authenticator would definately keep it more safe. Theory would be that you've been keylogged. Friend of mine just got hacked as well, even though he hasn't clicked anything weird, powerleveling, etc. I suggest download HijackThis (google it), scan your processes and then post on their forums.
you have some kind of keylogger on your computer is my guess. So i would suggest you reformat because people do have keyloggers that are undetectable by antivirus. Just what i would do if i were you.
Authenticator for sure. And im pretty sure that there are keyloggers out there that are undetectable. And as Silvera says above, get HijackThis do a scan.
I'll do that (the HijackThis) as soon as I get off work. I reinstalled a fresh Win 7 and WoW is downloading as we speak. Thanks for the info.
There seems to be something new going around which is targeting WoW and AION accounts specifically. Claims have gone from Notepad++, to Curse Client, to HB/GB itself being the "thief". While it's quite obvious that it's not NP++ or HB/GB (would be a stupid business choice for us to be honest), Curse Client has had issues in the passed with flash exploits. (No, I'm not saying thats the cause of it either) As bloodlust8 said, Spybot and Malwarebytes are both very good antivirus/spyware programs. I'd also suggest Windows Defender. (It's free, and provided by Microsoft themselves. Turnaround time is ~1-2 days on known viruses and exploits.)
Yeah Ive herd it was HB/GB or one of the plugins but don't know if there is any truth to it. its most likely spyware
I use Buddy products, Notepad++, and curse. I am just fine. It looks like you're cruising the net on the same comp that you play on... which is bad. The only thing I do on my wow computer is cruise the forums. I don't even download .exe's on here. I use another computer for that.
