Oh ****, Where Is My Stuff, What Happened

I had just finished getting my ele to arborstone, logged out, logged back in, left it at screen and took a break, no more than 1/2 and hour if not less, came back, clicked on my Ritualist, said my loggin had timed out, so ok, I put in my password, then I click my Rt again, and it takes me to the great temple of balthazar instead of Zin Zu Corridor, So I say, ok...., no big, except when I looked at my inventory, My IDS was gone :O, then I noticed others were gone as well. So I logged out and checked my other chars, and yep, some are missing from each. I exited gw and rebooted, actually this was before checking the other chars, and same things, items missing, and all pve chars in great temple of B, WTF happened, how do I fix it. And no, no one accessed my pc while I was downstairs, they are asleep, and wouldnt know what they were doing even if they did get on, etc. So what happened? PLZ HELP!!!

What is an IDS?

And please try to type in a readable manner.

IDS - Icey Dragon Sword

From a strategic standpoint, it's pretty lame, but it's a very popular collector's item (or it was at one time)

Sounds like someone logged into your account, kicking you off. They then met a friend at a common area (great temple of balthazar) and transferred your items of value to another account.

If this is the case, chances are you have shared your password with a "friend", or you have downloaded a keylogger through some 3rd party program. I would recommend you change your password while you can, after scanning your system to make sure there is no logger.

As for your items, well they are gone. Anet will return your account if hacked/stolen, but any items/gold taken will not be returned or reinstated.


Check every character to make sure it wasn't just an error and the equipment is in a different bag/backpack then you thought, and check your Xunlai storage agent account.

Bingbingbingbing! We have a winner! You've been hijacked my friend. As he said, it would be wise to change all your account info after you've scanned your PC.

They made off with 400k, my IDS, my Kunavaang, my hydra, my jade armor, left my troll and fungal wallow, made of with some gold bows, daggers, kephkets refuge, thats mostly it. What do I scan my PC with, AVG? BTW, I am in a guild, and they changed their website recently, its a guildportal site, and I updated my info, and put my username and password. The password I put was the same as my GW password, like it is for this site. Could the owner of the site be able to see my password, and guess that it was what I used for my account? Also, I was logged in to the game, how the the hacker have accessed my account while I was logged in, though it did say my time had expired. Wow, its amazing that I have not broken my monitor yet, or picked up my rifle and gone out and shot at passing cars, I feel really calm. Anyways, as for what to scan with, could someone reply.

the password is in the database of the forum, and only an admin can look in the forum. However he can't normally acces the passwords, because normally all passwords, email adress and much more are encrypted so they can only be seen if the admin knows a lot of encrypting and he can decrypt it. But i don't know if there is a way to get all stuff in a database that won't encrypt the private data, but that would mean the admin of the forum did it. Or it could be a hacker that just hacked the forum and got the database, decrypted it and stole the items but that won't really happen i think

btw for the scans you could do a lot like (some of them can be done just by internet):

AVG
NORTON
PANDA antivirus
NOD32

I would recomment that you search for spywere too

Spybot search and destroy
hijack this (not sure because i forget the name, but i think it is this name)

this is top rated and will tell you what you have for free but you have to buy it to remove it.

http://www.pctools.com/spyware-doctor/

hijack this is tops also but a bitch to use if you are not used to it

EDIT

here is another top rated one

http://www.webroot.com/?rc=4929&ac=5190722

TIP FOR FUTURE REFERENCE

1 have a separate email for GW alone
make it random alpha/numeric as big as they will let you

[email protected] (AND DONT GIVE IT OUT)

2 make your password as long as you are allowed and do not give it out period.

since it would be a bitch to type those in each time put them elsewhere on your pc and simply copy/paste them in instead of typing them in

3 scan for spyware every time before logging in .

takes me about 5 minutes while i am going over this forum.

In theory, I could find out your password from either this site or the other one, and quite easily steal your items. The best plan is to make a totally random password, and write it on a post-it stuck to your monitor. An example could be:

An34St83Fxt223

Try hitman pro it got the most of the named anti spy and virus scanners from above in 1. Its free,although some components are on a trial bases. but great for a 1 off use

http://www.hitmanpro.nl/

Mzzls $neekie

There. Right there is your mistake. I'm almost positive.

Never use the same password twice for anything important. If you want to keep a 'trash' password for all the forums you're on, etc., that's one thing, but always use different passwords for anything of value: your bank accounts, PayPal, games, and so on. I use a password generator/database for my Palm to keep track of them all.

It wasn't necessarily the site owner. Many forum apps are notoriously easy to hack.

To Note: During Normal Play, you never "Time Out" on your login and get kicked off. That message most probably indicates that someone logged into your account at another location and it kicked the the current logged in version out (that being you).

The fact that your characters were in Great Temple and only missing Good items (they didnt take the "crappy" minipets, or the "crappy" green) only confirms the account hijack.

People are yelling forum..but its most probably a keylogger. The site owner of a forum cannot view members passwords, and considering the way passwords are stored getting someones off a forum would be rather hard, and the attempt would probably be quite noticable by the system admin.

You probably visited some "questionable" site (not saying actually you were looking up hacks or anything, alot of things can hide things and put them on your system, doesnt have to be fake hack sites).

actually if someone else logged on he wouldve been given the "someone else has logged onto your account" message, and not the "your connection has timed out"
i get the connection timed out message usually when i leave my screen on the choose char screen and minimize to browse the internet; when i restore about 10 minutes later i get that lil pop up screen
as for the post it was perfectly readable, and id suggest using ad-aware
its picked up things that avg hasnt before

What happened was, someone logged on, which booted him to the login screen. Then, they logged off, while his login screen timed-out at some point. Finally, when he logged back in, everything was normal except for his stuff having been pilfered.

Adaware is a great program. I use that together with Spybot S&D. They complment each other well as sometimes one will find or be able to clean something that the other has missed.

http://www.safer-networking.org/

Another useful tool is Spyware Blaster. This runs all the time and blocks the installation of quite a lot of the more common spyware.

http://www.javacoolsoftware.com/spywareblaster.html

Someone esle mentioned Hijack This. That is my tool of last resort. It is a seriously powerful piece of software that can have equally seriously devastating results on your PC if you do not know what you are doing. Be very careful when using this tool as it can make your PC unbootable if you make a mistake when using it.

You really should have a separet password for the GW client, and to be realy safe a e-mail address only used for GW account.
Using the same password is like asking to be hijacked

For the record...I leave GW on the char selection screen all the time (anytime I leave the computer basically) - and have NEVER been "Timed Out" for sitting there...

I honestly wouldn't click on any of the links given, as they too could be a cleverly disguised keylogger. Wouldn't those be the last thing you'd expect them to be? If you want to find something to make sure your computer isn't key logged or what not, just go out and search for something on your own, there are many reliable sources out there through trustworthy websites that have reputations such as MSN, Symantec, etc...

Just do as Stockholm has said; why not use separate passwords?
The admin at the forums should be able to see most of your info..