Oh ****, Where Is My Stuff, What Happened

Dagoth Umbra

Dagoth Umbra

Lion's Arch Merchant

Join Date: Jun 2005

In Cartman's Brain, Directing.

Lazy Dominus Legatus [LaZy]

W/E

I had just finished getting my ele to arborstone, logged out, logged back in, left it at screen and took a break, no more than 1/2 and hour if not less, came back, clicked on my Ritualist, said my loggin had timed out, so ok, I put in my password, then I click my Rt again, and it takes me to the great temple of balthazar instead of Zin Zu Corridor, So I say, ok...., no big, except when I looked at my inventory, My IDS was gone :O, then I noticed others were gone as well. So I logged out and checked my other chars, and yep, some are missing from each. I exited gw and rebooted, actually this was before checking the other chars, and same things, items missing, and all pve chars in great temple of B, WTF happened, how do I fix it. And no, no one accessed my pc while I was downstairs, they are asleep, and wouldnt know what they were doing even if they did get on, etc. So what happened? PLZ HELP!!!

majoho

majoho

Forge Runner

Join Date: Jul 2006

Denmark

What is an IDS?

And please try to type in a readable manner.

Vahn Roi

Vahn Roi

Forge Runner

Join Date: Apr 2006

[HiDE]

IDS - Icey Dragon Sword

From a strategic standpoint, it's pretty lame, but it's a very popular collector's item (or it was at one time)

Caleb

Caleb

Nil nisi malis terrori.

Join Date: Aug 2005

Mo/Me

Sounds like someone logged into your account, kicking you off. They then met a friend at a common area (great temple of balthazar) and transferred your items of value to another account.

If this is the case, chances are you have shared your password with a "friend", or you have downloaded a keylogger through some 3rd party program. I would recommend you change your password while you can, after scanning your system to make sure there is no logger.

As for your items, well they are gone. Anet will return your account if hacked/stolen, but any items/gold taken will not be returned or reinstated.


Check every character to make sure it wasn't just an error and the equipment is in a different bag/backpack then you thought, and check your Xunlai storage agent account.

Big_Iron

Big_Iron

Desert Nomad

Join Date: Dec 2005

The Edge

Tormented Weapons [emo]

Quote:
Originally Posted by Caleb The Pontiff
Sounds like someone logged into your account, kicking you off. They then met a friend at a common area (great temple of balthazar) and transferred your items of value to another account.

If this is the case, chances are you have shared your password with a "friend", or you have downloaded a keylogger through some 3rd party program. I would recommend you change your password while you can, after scanning your system to make sure there is no logger.

As for your items, well they are gone. Anet will return your account if hacked/stolen, but any items/gold taken will not be returned or reinstated.


Check every character to make sure it wasn't just an error and the equipment is in a different bag/backpack then you thought, and check your Xunlai storage agent account.
Bingbingbingbing! We have a winner! You've been hijacked my friend. As he said, it would be wise to change all your account info after you've scanned your PC.

Dagoth Umbra

Dagoth Umbra

Lion's Arch Merchant

Join Date: Jun 2005

In Cartman's Brain, Directing.

Lazy Dominus Legatus [LaZy]

W/E

They made off with 400k, my IDS, my Kunavaang, my hydra, my jade armor, left my troll and fungal wallow, made of with some gold bows, daggers, kephkets refuge, thats mostly it. What do I scan my PC with, AVG? BTW, I am in a guild, and they changed their website recently, its a guildportal site, and I updated my info, and put my username and password. The password I put was the same as my GW password, like it is for this site. Could the owner of the site be able to see my password, and guess that it was what I used for my account? Also, I was logged in to the game, how the the hacker have accessed my account while I was logged in, though it did say my time had expired. Wow, its amazing that I have not broken my monitor yet, or picked up my rifle and gone out and shot at passing cars, I feel really calm. Anyways, as for what to scan with, could someone reply.

levortex

Frost Gate Guardian

Join Date: Jun 2006

Netherlands, gelderland

none yet

E/Mo

the password is in the database of the forum, and only an admin can look in the forum. However he can't normally acces the passwords, because normally all passwords, email adress and much more are encrypted so they can only be seen if the admin knows a lot of encrypting and he can decrypt it. But i don't know if there is a way to get all stuff in a database that won't encrypt the private data, but that would mean the admin of the forum did it. Or it could be a hacker that just hacked the forum and got the database, decrypted it and stole the items but that won't really happen i think

levortex

Frost Gate Guardian

Join Date: Jun 2006

Netherlands, gelderland

none yet

E/Mo

btw for the scans you could do a lot like (some of them can be done just by internet):

AVG
NORTON
PANDA antivirus
NOD32

I would recomment that you search for spywere too

Spybot search and destroy
hijack this (not sure because i forget the name, but i think it is this name)

Loviatar

Underworld Spelunker

Join Date: Feb 2005

Quote:
Originally Posted by Dagoth Umbra
Anyways, as for what to scan with, could someone reply.
this is top rated and will tell you what you have for free but you have to buy it to remove it.

http://www.pctools.com/spyware-doctor/

hijack this is tops also but a bitch to use if you are not used to it

EDIT

here is another top rated one

http://www.webroot.com/?rc=4929&ac=5190722

TIP FOR FUTURE REFERENCE

1 have a separate email for GW alone
make it random alpha/numeric as big as they will let you

[email protected] (AND DONT GIVE IT OUT)

2 make your password as long as you are allowed and do not give it out period.

since it would be a bitch to type those in each time put them elsewhere on your pc and simply copy/paste them in instead of typing them in

3 scan for spyware every time before logging in .

takes me about 5 minutes while i am going over this forum.

.defekt

.defekt

Krytan Explorer

Join Date: Aug 2005

Ex Talionis [Law], Schindlers Fist [ouch]

In theory, I could find out your password from either this site or the other one, and quite easily steal your items. The best plan is to make a totally random password, and write it on a post-it stuck to your monitor. An example could be:

An34St83Fxt223

$neekie

Academy Page

Join Date: Jun 2006

Netherlands

R/

Try hitman pro it got the most of the named anti spy and virus scanners from above in 1. Its free,although some components are on a trial bases. but great for a 1 off use

http://www.hitmanpro.nl/

Mzzls $neekie

SFEley

Academy Page

Join Date: Jun 2006

Ashford Road Irregulars

E/Mo

Quote:
Originally Posted by Dagoth Umbra
BTW, I am in a guild, and they changed their website recently, its a guildportal site, and I updated my info, and put my username and password. The password I put was the same as my GW password, like it is for this site.
There. Right there is your mistake. I'm almost positive.

Never use the same password twice for anything important. If you want to keep a 'trash' password for all the forums you're on, etc., that's one thing, but always use different passwords for anything of value: your bank accounts, PayPal, games, and so on. I use a password generator/database for my Palm to keep track of them all.

Quote:
Could the owner of the site be able to see my password, and guess that it was what I used for my account?
It wasn't necessarily the site owner. Many forum apps are notoriously easy to hack.

Former Ruling

Grotto Attendant

Join Date: Oct 2005

Cedartown, Georgia

R/

To Note: During Normal Play, you never "Time Out" on your login and get kicked off. That message most probably indicates that someone logged into your account at another location and it kicked the the current logged in version out (that being you).

The fact that your characters were in Great Temple and only missing Good items (they didnt take the "crappy" minipets, or the "crappy" green) only confirms the account hijack.

People are yelling forum..but its most probably a keylogger. The site owner of a forum cannot view members passwords, and considering the way passwords are stored getting someones off a forum would be rather hard, and the attempt would probably be quite noticable by the system admin.

You probably visited some "questionable" site (not saying actually you were looking up hacks or anything, alot of things can hide things and put them on your system, doesnt have to be fake hack sites).

Kruzing Low

Kruzing Low

Frost Gate Guardian

Join Date: Jun 2006

actually if someone else logged on he wouldve been given the "someone else has logged onto your account" message, and not the "your connection has timed out"
i get the connection timed out message usually when i leave my screen on the choose char screen and minimize to browse the internet; when i restore about 10 minutes later i get that lil pop up screen
as for the post it was perfectly readable, and id suggest using ad-aware
its picked up things that avg hasnt before

Ole Man Bourbon

Ole Man Bourbon

Jungle Guide

Join Date: Jun 2005

Atlanta

GONG

W/E

What happened was, someone logged on, which booted him to the login screen. Then, they logged off, while his login screen timed-out at some point. Finally, when he logged back in, everything was normal except for his stuff having been pilfered.

Hengis

Hengis

Wilds Pathfinder

Join Date: Apr 2006

London

Better Than Life (BTL)

R/

Quote:
Originally Posted by Kruzing Low
actually if someone else logged on he wouldve been given the "someone else has logged onto your account" message, and not the "your connection has timed out"
i get the connection timed out message usually when i leave my screen on the choose char screen and minimize to browse the internet; when i restore about 10 minutes later i get that lil pop up screen
as for the post it was perfectly readable, and id suggest using ad-aware
its picked up things that avg hasnt before
Adaware is a great program. I use that together with Spybot S&D. They complment each other well as sometimes one will find or be able to clean something that the other has missed.

http://www.safer-networking.org/

Another useful tool is Spyware Blaster. This runs all the time and blocks the installation of quite a lot of the more common spyware.

http://www.javacoolsoftware.com/spywareblaster.html

Someone esle mentioned Hijack This. That is my tool of last resort. It is a seriously powerful piece of software that can have equally seriously devastating results on your PC if you do not know what you are doing. Be very careful when using this tool as it can make your PC unbootable if you make a mistake when using it.

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Quote:
Originally Posted by Dagoth Umbra
They made off with 400k, my IDS, my Kunavaang, my hydra, my jade armor, left my troll and fungal wallow, made of with some gold bows, daggers, kephkets refuge, thats mostly it. What do I scan my PC with, AVG? BTW, I am in a guild, and they changed their website recently, its a guildportal site, and I updated my info, and put my username and password. The password I put was the same as my GW password, like it is for this site. Could the owner of the site be able to see my password, and guess that it was what I used for my account? Also, I was logged in to the game, how the the hacker have accessed my account while I was logged in, though it did say my time had expired. Wow, its amazing that I have not broken my monitor yet, or picked up my rifle and gone out and shot at passing cars, I feel really calm. Anyways, as for what to scan with, could someone reply.
You really should have a separet password for the GW client, and to be realy safe a e-mail address only used for GW account.
Using the same password is like asking to be hijacked

Former Ruling

Grotto Attendant

Join Date: Oct 2005

Cedartown, Georgia

R/

For the record...I leave GW on the char selection screen all the time (anytime I leave the computer basically) - and have NEVER been "Timed Out" for sitting there...

Kai Nui

Kai Nui

Desert Nomad

Join Date: Aug 2005

Behind you with a knife

Celebrity Gangsters [FamE]

Me/

I honestly wouldn't click on any of the links given, as they too could be a cleverly disguised keylogger. Wouldn't those be the last thing you'd expect them to be? If you want to find something to make sure your computer isn't key logged or what not, just go out and search for something on your own, there are many reliable sources out there through trustworthy websites that have reputations such as MSN, Symantec, etc...

Shadowfox1125

Shadowfox1125

Forge Runner

Join Date: Mar 2005

PST

W/

Quote:
Originally Posted by Stockholm
You really should have a separet password for the GW client, and to be realy safe a e-mail address only used for GW account.
Using the same password is like asking to be hijacked
Just do as Stockholm has said; why not use separate passwords?
The admin at the forums should be able to see most of your info..

GrendelScout1

GrendelScout1

Ascalonian Squire

Join Date: Sep 2005

[OBD]

Mo/

I would think that if you were to submit a report to ncsoft stating the details of the event and the time frame in which it occurred, the admin guys would be able to monitor the logs to see how the transactions went down between your hijacked characters and the thieves. At least the recipient(s) of all your stuff may get a ban out of it, provided the transactions all took place between your account and another account or two (ie. it wasn't a free give away to a bunch of noobies in ascalon city or something of the like).

And to echo the sentiments of the above posters concerning protecting yourself, that is always a good idea. Use complex passwords and change them often, use separate email accounts, don't download questionable programs, buckle your seat belt, wear a hardhat and steel toed shoes, wear a rubber, etc.

Retribution X

Retribution X

Desert Nomad

Join Date: Nov 2005

Check behind you again.

N/

I personally prefer to max out the character max limit for the password, and use a nice little thing i learned.

On your GW shortcut, at the end, add, password="Insertpasswordhere"

Loviatar

Underworld Spelunker

Join Date: Feb 2005

Quote:
Originally Posted by Retribution X
I personally prefer to max out the character max limit for the password, and use a nice little thing i learned.

On your GW shortcut, at the end, add, password="Insertpasswordhere"
i do the same but be sure that your pc is physically secure because one quick look at the shortcuts properties shows the password..

an alternative is to have a secure folder with them in it and simply copy/paste to log in

Former Ruling

Grotto Attendant

Join Date: Oct 2005

Cedartown, Georgia

R/

=password (which I use) is great....If noone else uses your computer. Not that great otherwise.

Mesmer in Need

Mesmer in Need

Forge Runner

Join Date: Mar 2006

[ToA]

Quote:
Originally Posted by .defekt
In theory, I could find out your password from either this site or the other one, and quite easily steal your items. The best plan is to make a totally random password, and write it on a post-it stuck to your monitor. An example could be:

An34St83Fxt223
Ya on your monitor. Where everyone can see it

Retribution X

Retribution X

Desert Nomad

Join Date: Nov 2005

Check behind you again.

N/

or, I have used my SS# before. I hope nobody figures that out...

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Quote:
Originally Posted by Mesmer in Need
Ya on your monitor. Where everyone can see it
Not on the monitor at school.

Hockster

Hockster

Banned

Join Date: Jul 2005

It's a harsh lesson, but hopefully one well learned. Neveruse the same password for anything. It's best not to trust anyone offering to setup forums for your guild. Always assume the worst and use completely different passwords. There are numerous free password generators found via a google search. Make then 24 characters long, mixed case, numeric, and mix in special characters. Keep the password on a text document separate from anywhere that other users can access. If you're using Windows XP Pro, you can encrypt the file so no one else can read it. If you do use encryption make sure to read how to export the encryption key. If you ever reformat and do not have that key, it's damned near impossible to crack the encryption scheme.

This is a fantastic app for keeping secure passwords:
http://www.roboform.com/

It's well worth the price.

Plushie Penguin

Plushie Penguin

Krytan Explorer

Join Date: Apr 2006

That plushie penguin on a shelf in your bed room

Rt/E

I remember one of the MMORPG clan/guild forum sites having a hacker-ish thing on them, when the page is loading, read what it's loading, one of them, after getting whats on the page your looking at, will start to transfer data with ninjasurfers.com sound like a hacker tactic, I think it was guild portal that did that.
oh and, do a virus and spyware scan once a week, or every other week, over night if it takes longer then you like, clear the cookies on your computer for your log ons and all that crap, it helps

gamecube187

gamecube187

Wilds Pathfinder

Join Date: Jun 2006

Quote:
Originally Posted by Retribution X
I personally prefer to max out the character max limit for the password, and use a nice little thing i learned.

On your GW shortcut, at the end, add, password="Insertpasswordhere"
What is the extra thing on the shortcut going to do?

Hockster

Hockster

Banned

Join Date: Jul 2005

It automtically logs you into the game. Only worthwhile if you have one account, and if no one else can ever access your computer.

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Quote:
Originally Posted by gamecube187
What is the extra thing on the shortcut going to do?
A keylogger records every time you hit a key on the keybord, with the shortcut you don't type the password so it will not be recorded

Hockster

Hockster

Banned

Join Date: Jul 2005

Quote:
Originally Posted by Stockholm
A keylogger records every time you hit a key on the keybord, with the shortcut you don't type the password so it will not be recorded
Many new, more advanced keyloggers also take periodic screenshots and send those as well.

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Quote:
Originally Posted by Hockster
Many new, more advanced keyloggers also take periodic screenshots and send those as well.
Password never shows when used in shortcut, unless you open properties and show the line.

And plz read post#22

Poison Ivy

Poison Ivy

Forge Runner

Join Date: Jan 2006

Toronto

Hopping

Mo/A

Also, NEVER reveal your account name, there are password generators that tries every password avalable until they get the right one, but you don't have to worry about that if your password is bigger then 8 digits, those take months to crack

Hockster

Hockster

Banned

Join Date: Jul 2005

And again, adding the password to the shortcut is only usefull for people with one account.

Haggard

Haggard

Desert Nomad

Join Date: Dec 2005

Urmston, Manchester, UK

Greener Pastures [DVDF]

W/Rt

Quote:
Originally Posted by Vahn Roi
From a strategic standpoint, it's pretty lame, but it's a very popular collector's item (or it was at one time)
It's not bad vs other warriors, especially after the recent update. You can see Im A Paladin using it in the GvG's of his guild - can't remember who they were again though..

Loviatar

Underworld Spelunker

Join Date: Feb 2005

Quote:
Originally Posted by Hockster
And again, adding the password to the shortcut is only usefull for people with one account.
not true as i have multiple accounts set up that way.

you do have to copy/paste the other email/pass the first time you switxh but after that it is auto login for as long as you stay on that account when switching from one character (on that account) to another

Hockster

Hockster

Banned

Join Date: Jul 2005

Quote:
Originally Posted by Loviatar
not true as i have multiple accounts set up that way.

you do have to copy/paste the other email/pass the first time you switxh but after that it is auto login for as long as you stay on that account when switching from one character (on that account) to another
Yes, but changing accounts is a pain in the ass. F12 just relogs back into the same account. I keep my password in an encrypted file, and just copy/paste them when changing accounts. I just find it much more manageable that way.

Stockholm

Stockholm

Desert Nomad

Join Date: Feb 2006

Censored

Censored

R/

Just make 1 shortcut for each account