account compromised? - Page 2

Aligatr · 04-14-09, 06:26 PM

Originally Posted by spiritwulf

Yes, as someone who has uploaded addons to this site, trust me, they are very thorough.
At times when i first started i thought i'd never get the dang thing aproved hehehe

Nothin but love Cairenn, and thanks for your patience

Hahaha, well thats real good to know. I'll def be getting them from here from now on then. ; )

Vis · 04-14-09, 06:27 PM

Provided Blizz's site stays up,patch day and all you know, take a look here http://www.blizzardstore.com/store/d...?id=1100000182. There's also a newer mobile phone version for those that have an Iphone I believe it was. They will both work the same way though.

Another site showing a How To from buying to using the Authenticator: http://www.gamespot.com/hardware/blo...-hands-on.html

*Edit: Added how to

Aligatr · 04-14-09, 06:29 PM

Originally Posted by Seerah

You didn't necessarily have to play. It could have been logging into the forums.

True, but if it takes months for someone to get my info and actually perform the hack that couldnt be the case either. I've just recently subscribed to this forum, and this is the first time i've actually been on it. Last week some time was the first time i logged in, and that was to join to group to download NUI +.

Aligatr · 04-14-09, 06:31 PM

Originally Posted by spiel2001

It's a physical device that gives you a secure password on each login. Makes your account pretty much hack-proof.

I like the sound of that. Do you know where and how i could get this by chance?

Vis · 04-14-09, 06:33 PM

Scroll up to my post on this page, links are in the message

FYI, Blizz is usually sold out, and when they get them in stock, they go fast!

spiel2001 · 04-14-09, 06:39 PM

Originally Posted by Aligatr

And as far as the executables you mentioned in some of the addons, i have quite a few, questhelper being one of them. Should i go ahead and clean all that off, and re-download from this site? Just to be safe?

QuestHelper can be trusted *if* you got it from a reputable place like WoWI or Curse. If you got it anywhere else, I would be terrified of it because you're expecting to get an executable and that's easy to dupe with a keylogger.

Generally, I would be afraid of any "WoW Mod" that included an executable unless I knew exactly what it was, where it came from and how much I could trust it.

This site and Curse you can trust... anything else I would be wary of.

**Seerah** · 04-14-09, 08:23 PM

Originally Posted by Aligatr

True, but if it takes months for someone to get my info and actually perform the hack that couldnt be the case either. I've just recently subscribed to this forum, and this is the first time i've actually been on it. Last week some time was the first time i logged in, and that was to join to group to download NUI +.

Not this forum, silly.

The official WoW forums. The ones that would have the same login information as your account.

Or even their account management pages.

Yhor · 04-14-09, 10:23 PM

And as far as the executables you mentioned in some of the addons, i have quite a few, questhelper being one of them. Should i go ahead and clean all that off, and re-download from this site? Just to be safe?

I can't think of even one legitimate addon at the moment that requires an executable to load or install. I'm sure an admin could count on one hand the amount of .exe files hosted on this site, and those are likely tools, not addons.

To answer your question, yes, I would remove any .exe files in your addon directory, or relating to WoW addons, however, if you already ran an .exe file with a keylogger, you will need to identify the keylogger and remove it. Simply removing the installer (.exe file) doesn't do any good except preventing you from reinstalling.

Vyper · 04-14-09, 10:53 PM

Originally Posted by Aligatr

And as far as the executables you mentioned in some of the addons, i have quite a few, questhelper being one of them. Should i go ahead and clean all that off, and re-download from this site? Just to be safe?

QuestHelper is NEVER distributed in executable form. When you unzip the folder you should see only the following kinds of files:
.lua (the code)
.xml (code as well, QH doesn't use any, but it's embedded libraries do)
.toc (Tells WoW what it needs to know about the addon)
.tga (image)
.txt (readme files)

anything else, especially .exe or .msi, and your whatever you've got, it's not QH (though it may have installed QH to keep you from realizing it). If you have addons with .exe files they are likely what gave you the keylogger. I highly recommend ONLY downloading addons from WoWI and Curse.

Originally Posted by Yhor

I can't think of even one legitimate addon at the moment that requires an executable to load or install.

Only one I know of with an installer is MobMap.

spiel2001 · 04-15-09, 04:17 AM

Didn't QuestHelper have a tool at one time that would upload your SavedVariables data to the QH site for the database? I know Cosmos and Thottbot did as well.

When I was talking about EXEs, I wasn't talking about installers, I was talking about tools in the distribution for updating data and such.

And yes, there's only a very small handful that use them and it's generally a frowned upon practice.

AsheruWolf · 04-15-09, 04:45 AM

We all know its scott hes in out account logging our keys stealing our phat lootz.

spiel2001 · 04-15-09, 05:18 AM

Shhhhhhhhhhhhhhhh....

Wai you gives way mai secretz?

Aligatr · 04-15-09, 04:22 PM

Originally Posted by Seerah

Not this forum, silly.

The official WoW forums. The ones that would have the same login information as your account.

Or even their account management pages.

Ahh, ok. : p Well, that could very well have been a factor too. ; /

Aligatr · 04-15-09, 04:26 PM

Originally Posted by Vyper

QuestHelper is NEVER distributed in executable form. When you unzip the folder you should see only the following kinds of files:
.lua (the code)
.xml (code as well, QH doesn't use any, but it's embedded libraries do)
.toc (Tells WoW what it needs to know about the addon)
.tga (image)
.txt (readme files)

anything else, especially .exe or .msi, and your whatever you've got, it's not QH (though it may have installed QH to keep you from realizing it). If you have addons with .exe files they are likely what gave you the keylogger. I highly recommend ONLY downloading addons from WoWI and Curse.

Only one I know of with an installer is MobMap.

I dont know if i have any executables or not. But i will be checking. I was just saying that i do have QH as well as lots of other addons, because someone mentioned QH being targeted.

Vyper · 04-15-09, 07:15 PM

Originally Posted by spiel2001

Didn't QuestHelper have a tool at one time that would upload your SavedVariables data to the QH site for the database? I know Cosmos and Thottbot did as well.

When I was talking about EXEs, I wasn't talking about installers, I was talking about tools in the distribution for updating data and such.

And yes, there's only a very small handful that use them and it's generally a frowned upon practice.

Unless Smariot was distributing one and discontinued it before .27 (when I came on board), no QH has always relied on users to locate the proper file and e-mail it in.
I'd be shocked to learn the Smariot created a Window's executable, he always seemed to hold it in distain.

Originally Posted by Aligatr

I dont know if i have any executables or not. But i will be checking. I was just saying that i do have QH as well as lots of other addons, because someone mentioned QH being targeted.

Ah I misunderstood. I took it to mean you had an executable claiming to be QuestHelper.

ekna · 04-16-09, 02:31 AM

Well i don't have that problem any more, got myself an authenticator and if one or the other doesn't match (password or code) forget it, you also need it for your account log in so be gone pests of key loggers and welcome to the "safer" way of playing wow

Petrah · 04-16-09, 03:15 AM

Originally Posted by ekna

Well i don't have that problem any more, got myself an authenticator and if one or the other doesn't match (password or code) forget it, you also need it for your account log in so be gone pests of key loggers and welcome to the "safer" way of playing wow

Keep in mind that even with an authenticator, that may keep your wow account safe but it does nothing for any of the other things you log into on your computer that use a login and a password.... forums, email accounts, banking etcetera. In other words, don't forget to continue safety on the net.

Aligatr · 04-17-09, 11:38 AM

Originally Posted by ekna

Well i don't have that problem any more, got myself an authenticator and if one or the other doesn't match (password or code) forget it, you also need it for your account log in so be gone pests of key loggers and welcome to the "safer" way of playing wow

How does this whole authenticator thing work, and how much does it cost?

Vis · 04-17-09, 11:48 AM

Repost of my earlier list

Originally Posted by Vis

Provided Blizz's site stays up,patch day and all you know, take a look here xxxxxxx. There's also a newer mobile phone version for those that have an Iphone I believe it was. They will both work the same way though.

Another site showing a How To from buying to using the Authenticator: http://www.gamespot.com/hardware/blo...-hands-on.html

*Edit: Added how to

Delmara · 04-17-09, 11:48 AM

Originally Posted by Aligatr

How does this whole authenticator thing work, and how much does it cost?

http://www.blizzardstore.com/store/d...?id=1100000442 gives you information about the authenticator.