Curse

Alexandra-Sweet · May 13, 2008, 08:51 PM // 20:51

I've written this hack prevention guide because of the recent "hacking" going on.

It's kind of incomplete at the moment and my bad English might be in it as well.

It would be nice if more people could contribute to it so the guide can go live (probably somewhere in Riverside Inn) .

I will edit the credits with the names of people who can provide a mayor contribution to the guide, as well clear up a lot of spelling errors.

Quote:

Originally Posted by Alexandra's Hack Prevention Guide

Your Password.

GM's will never ask you for your password, if GM's need to look into your account they won't need a password.
If someone says they are a GM and ask for your password, they are lying and you should report it to Guild Wars Support.

Never give out your password, even if it's your best friend forever, boy/girlfriend, or even grandmother.

Be sure you have a secure password.
Your characters name isn't secure.
Your birthday isn't secure.
Your real name isn't secure.
Any information that someone may know about you isn't secure.

The safest password is:
- Not in the dictionary.
- At least 8 characters long
- Contains either a number or random non letter character like !@#$%^&*()
- Contains both uppercase and lowercase letters
- Changed every 6 months.

Don't buy gold.
Gold sellers sell you mass amounts of gold,
plant keyloggers into your computer, then hack your account stealing it back.
So they will end up with the gold still in their hands and everything you worked for.

Never write your passwords down on a piece of paper.

Don't use the same password for different websites, applications, forums, etc. If someone gets one, they get them all.

Your computer.

The following programs can greatly help you in protecting your computer/accounts and are free to home users.

Spybot Search and Destroy

Spybot Search and Destroy will find tracking cookies and keyloggers if you do have them.

It's recommended that you update and run Spybot Search and Destroy atleast once a week.

Ad-Aware

Spybot Search and Destroy fixes problems with tracking cookies, system internals (Registry), Winsock LSPs, ActiveX objects, browser hijackers and BHOs, and can to some extent protect a user's privacy by deleting usage tracks. Spybot also includes an "Immunize" feature to block the installation of spyware before it occurs. Another tool included in Spybot is a file shredder, for the secure deletion of files.
And it also comes with an easter egg!

Note: PC Magazine gave Spybot Search and Destroy 1.5 a score of just 1.5 out of 5, elected it as one of the worst tech products of the first quarter of 2008 and called its malware cleaning-up skills mediocre.
Even though Spybot Search and Destroy can be mediocre it can still find many things other programs can't.
But most important is that it's compatable with other antivirus programs (except for Norton Antivirus, then again Norton Antivirus had failed a lot in the past years but is slowly coming back)

Ad-Aware is complimentary to Spybot Search and Destroy.
It can sometimes catch things Spybot Search and Destroy can't.

It's recommended that you update and run Ad-Aware atleast once a week.

Ad-Aware detects and removes spyware or adware on a user's computer. It also detects dialers, Trojans, malware, data-mining, aggressive advertising, parasites, browser hijackers and tracking components on the computer's memory, registry, Hosts file, hard, removable and optical drive.

Note: Ad-Aware comes in 4 versions:
Free - for the users that don't want to pay.
Plus - for users that don't want to pay much.
Pro - The best but most expensive vesrion for home users.
Enterprise - For companies with a network environment.

The following programs require registration/yearly fee.

The best antivirus software.
ESET Smart Security (Also knows as NOD32, or NOD antivirus)
ESET Smart Security requires a yearly fee but there is a 30 day trial version available.

It's recommended that you run ESET Smart Security once every 3 days.

Smart Security comes with:
NOD32 Anti-Virus & Anti-Spyware engine
Firewall (port stealthing and advanced filtering features).
Anti spam (filtering with Bayesian filter, whitelisting and blacklisting)
Daily updates.

Note: ESET Smart Security is the best and fastest anti virus according to many sources, but the firewall and anti spyware is rated low by the same sources.

The best antispyware software.
Spyware-Doctor

Scans a PC for spyware,
Examines files on the hard drive, objects in memory, the Windows registry and cookies, then attempts to quarantine or remove threats.
It also includes real-time protection which attempts to block threats from being saved to the disk.
Set to startup automatically, suspicious programs running and other detection including new toolbars and add-ons for web browsers.

It's recommended that you update and run Spyware-Doctor atleast once a week.

Note: Not all programs will work with one another, so far ESET Smart Security runs fine with Spybot Search and Destroy and Ad-Aware.

Your computer's memory (for somewhat advanced users)

When pressing Crtl-Alt-Delete then click the tab "Processes" you will be able to see all* running processes on your computer.
If you have a keylogger or any other malicious program on your computer it's most likely here.

If you see any suspicious processes running you will first have to make sure it's malicious, you can do this by going to www.google.com and search for the process name "process.exe" for example.
If the Google results turn out that the process is malicious (make sure you check multiple results in Google, not just 1) you should right click on the task and then press "End Process".

Now you've prevented the program from doing any harm, however the program is still on your computer.

There are 2 methods of removing the malicious program.

Method 1.
Scan your computer with an updated virusscanner/antispyware and have the antivirus/antispyware program remove it.

Method 2.
This method is manually removing the malicious program from your computer.

You will need to know the location of the malicious program, you can do this by either going back to Google and search for common locations where the malicious program might be, then go to the specified folder and delete the malicious program (sometimes you have to click on "Tools" in the Folder's top bar, then click the tab "View" and check the circle infront of "Show hidden files and folders" in order for the malicious program to appear).
Or you can use the Windows Search (Go to Start > Search) to find the .exe file and from there you can delete it.

Note: When using Windows Search make sure to search for hidden files as well.

*Some processes are hidden, there's special software to detect these hidden processes and show them to the user, however antivirus software might detect this and alert the user that something bad is going on.

Keep in mind, this guide does not make it so you can never get hacked, but it can certainly help to prevent it.

Written by Alexandra Sweet~

Brian Fellow · May 13, 2008, 08:56 PM // 20:56

You seem to have forgotten an important roadblock for hackers - Firewalls

http://www.personalfirewall.comodo.com/

I've used the free version at home and you'll have to instruct what applications can run and what ports you can open or block. This firewall also protect against malware and outbound network/internet traffic that Windows XP doesn't.

toastgodsupreme · May 13, 2008, 09:03 PM // 21:03

Quote:

Originally Posted by Brian Fellow

You seem to have forgotten an important roadblock for hackers - Firewalls

http://www.personalfirewall.comodo.com/

I've used the free version at home and you'll have to instruct what applications can run and what ports you can open or block. This firewall also protect against malware and outbound network/internet traffic that Windows XP doesn't.

lol what?

Ok, so let's say I'm a 'hacker' (term used loosely due to overuse by tards on the internet). I go around snooping systems and gaining access to unprotected ones. Do you REALLY think I'm going to care about someone's GW account if I find they have the game installed on their comp?

Different situation...
I'm a 'hacker'. I like GW, I want access to more accounts. But oh wait, I don't have your IP addy. Maybe if I just... no, that won't work. But what if I... nope, nada.

In any situation, the 'hacker' would need to use a third party medium (direct connect through an IM service, message board with admin privs, trick you into going to their logging site, etc) to gain your IP addy.

And that's assuming you don't have a router. Which most people do. And the vast majority of routers block all unsolicited incoming communications by default.

So really, on a standard tard's computer, a firewall is "that thing that always pops up when I get online". Besides, most people simply allow everything their firewall asks them because "they just want it to work so they can get online". Again, defeating the purpose.

So, in summary... lol, what?

Edit: On a note more relevant to the OP...
People are idiots. People also don't want others knowing that they're idiots. Trust me, this is true of anyone in some way or another. And most people lack common sense. So when someone comes here and says they got "hacked", they're probably lying to cover up something dumb they did that gave someone else access to their account.

I'm sure the majority of these "hacks" were simply people downloading key loggers or giving their stuff out (either to a friend by choice or to someone who tricked them). If that's not the case, then they probably used the same username/pass to log into GW as they did to log into some forum they signed up for.

Really there comes a point where you get tired of protecting people from themselves. You have to let the kid touch the stove just once and get burned. After that, I guarantee he'll never touch the stove again. It sounds mean, but a lot of people JUST DON'T LEARN otherwise.

Besides, while this thread may have good intentions, it'll never reach the target audience. The target audience are dumb souls who will never come to these forums. They're the ones who allow anything through their firewall because they're too lazy to find out what's going on. But they'll come here once they get burned.

Alexandra-Sweet · May 13, 2008, 09:08 PM // 21:08

Quote:

Originally Posted by Brian Fellow

You seem to have forgotten an important roadblock for hackers - Firewalls

How could I forget firewalls... >.>

If you can provide a bit more information (links to articles, awards and features) I can add it to the guide and give you credit for it.

Mystica · May 13, 2008, 09:19 PM // 21:19

Quote:

Originally Posted by toastgodsupreme

People are idiots. People also don't want others knowing that they're idiots. Trust me, this is true of anyone in some way or another. And most people lack common sense. So when someone comes here and says they got "hacked", they're probably lying to cover up something dumb they did that gave someone else access to their account.

Too bad I can't have a sig here. That would be it.

Admael · May 13, 2008, 09:33 PM // 21:33

toastgodsupreme speaks so much truth.

I've never known anyone with common sense that was ever hacked. We all make mistakes, but people who get hacked are obviously doing something they shouldn't be.

1. Common sense (first line of defense)
2. NOD32 (anti-virus, "incase shit happens")
3. Firewall, included with XP/Vista (costs nothing, turn it on)

Aera · May 13, 2008, 09:38 PM // 21:38

Quote:

Originally Posted by toastgodsupreme

l

I'm sure the majority of these "hacks" were simply people downloading key loggers or giving their stuff out (either to a friend by choice or to someone who tricked them). If that's not the case, then they probably used the same username/pass to log into GW as they did to log into some forum they signed up for.

That should definitely be mentioned in the 'guide'. So many people fall for that stupid 'trick'. Hacking forum accounts on secluded forums like Guild forums or non-protected forums are easy to get. Everyone should have at least 3 different passwords which make no sense to anyone else so they can't be guessed either.

Believe me, I have guessed so many passwords, it's easier than you might think.
( I'm not saying I hack, I just guessed my friend's passwords and they turned out to be correct )

Bytor · May 13, 2008, 09:46 PM // 21:46

As a worker in the tech field, I can tell you spyware doctor is garbage and completely unnecessary asspybot and ad-aware are already listed and do the job quite well between the two.

Also AVG Free is a great anti-virus program. AVG also has a pay version that has more features if you feel compelled to have the bells and whistles. I've run AVG free for 3 years with no infections to date.

Alexandra-Sweet · May 13, 2008, 09:47 PM // 21:47

Quote:

Originally Posted by Aera

That should definitely be mentioned in the 'guide'. So many people fall for that stupid 'trick'. Hacking forum accounts on secluded forums like Guild forums or non-protected forums are easy to get. Everyone should have at least 3 different passwords which make no sense to anyone else so they can't be guessed either.

Quote:

Originally Posted by Alexandra's Hack Prevention Guide

Any information that someone may know about you isn't secure.

It is already mentioned in the guide, in a way.

As for "dumb" people, if they get hacked after reading this guide they are either hacked by a professional, or they are really dumb.

And toastgodsupreme

Keyloggers send information from your computer to a remote server, surely a firewall will pick something up like this and alert the user.

Tarun · May 13, 2008, 09:54 PM // 21:54

I disagree that Spyware Doctor is any good. In the past it resulted in numerous false positives. Now they have a freeware version that merely scans and you have to pay to remove any of the results.

SUPERAntiSpyware is worth looking at, as Ad-Aware has gone downhill since the 2007 release. Spybot still does an excellent job, and I would honestly never put any faith into a publication that sells issues for profit. That simply means that Company X will pay Magazine Y to give their Program Z a great review.

Cutting to the chase, I'd recommend:
AV: avast
Firewall: Comodo Pro
AntiSpyware/AntiMalware: Spybot S&D, Windows Defender, Malwarebytes Anti Malware, RogueRemover

Albert Algorn · May 13, 2008, 10:22 PM // 22:22

I agree with Tarun and Bytor. At work I had a trojan that NAV didn't find but AVG (free) did. So what are we paying for?

eggrolls · May 13, 2008, 11:56 PM // 23:56

Quote:

Originally Posted by Alexandra-Sweet

Don't use the same password for different websites, applications, forums, etc. If someone gets one, they get them all.

Not really necessary, IMO. That's just a bunch of passwords to remember.

I usually just follow a few basic things:

1. Group things together and segregate by importance. Stuff that are expendable (like forum accounts) have simple or even the same password. These are the things I don't mind losing... not like I'd lose them anyways. Stuff that are important (like game accounts, bank accounts, etc.) have complicated passwords and are never the same or related.

2. Have different e-mail addresses for each group. Expendable stuff get one common address. Important stuff may have several, non-related addresses.

3. Important account names share no similarities with publicly displayed names (character names, forum names, etc.)

Of course, all the above means absolutely nothing without some common sense.

zamial · May 14, 2008, 12:18 AM // 00:18

The truth about fire walls is that every machine needs only one. Having more than one is pointless. Firewalls allow your computer to interact with external hardware, such as printers or the guild wars a server. This is done by opening ports. So in other words having multiple firewalls will offer no further protection because the ports must be open on all of the firewalls. It's like wearing multiple condoms. One is more than enough per machine.

Scenario:
I am a sniper with a laser rifle, you are standing behind a concrete wall. There's a hole in the concrete wall, we can see each other through the hole. Now imagine ten concrete walls, all with holes in them, we can still see each other. Since I have a laser rifle, the extra walls offer no additional protection.

I hope this clears things up.

Snograt · May 14, 2008, 12:47 AM // 00:47

Nice analogy

Hannes · May 14, 2008, 12:54 AM // 00:54

Also use Firefox!

It's so much better imho.

I find Firefox actually one of the safest browsers around simply due to that fact that it doesn't use ActiveX Controls, so malicious content can't be run on your PC.

I know where I get my mega-spammage from

, and even though I promise myself religiously that I won't be tempted by these temptations to indulge in a little voyeurism every time I reload my Windows, I find myself having the occasional peek, sick bastard that I am. On these odd occasions, I sometimes use IE just to get where I am going, and guess what? There goes your clean slate, with the installation of some nasty little piece of software, thanks to IE & the wonderful ActiveX Controls. Reloading Windows is imminent.

I only use FireFox, ever, unless it's a lapse in my rock-solid, iron resolve. Naughty boy. Resist the Dark Side, run Firefox, don't use IE, and you too can find the "Path to Enlightenment."

What were we talking about again? I'm too lazy to open up another page...

Oh yeah... Firefox! Another nice little add-on I found that's called NoScript

Quote:

NoScript

The NoScript Firefox extension provides extra protection for Firefox, Flock, Seamonkey and others mozilla-based browsers: this free, open source add-on allows JavaScript, Java, Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank), and provides the most powerful Anti-XSS protection available in a browser.

NoScript's unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality...

You can enable JavaScript, Java and plugin execution for sites you trust with a simple left-click on the NoScript status bar icon (look at the picture), or using the contextual menu, for easier operation in popup statusbar-less windows.

Eh... my brain is fried... it's 3AM...

Bront · May 14, 2008, 01:43 AM // 01:43

FYI, Spybot Search and Destroy is rated poorly because it is a free product. However, because it is a free product, it doesn't make exceptions, loopholes, nor does it nag you for fees.

Spybot is one of the best spyware/malware prevention tools out there, if kept up to date. It's biggest downfall is that it does have to be run manually to do some of the better things (like inoculate, update, or scan), but it does not have an active resident that tracks registry changes as well as other things.

Tarun · May 14, 2008, 01:45 AM // 01:45

When paired with the /allhives command line switch, it does extremely well.

GaaaaaH · May 14, 2008, 02:41 AM // 02:41

missed: don't download hacks, because these will often contain malicious code that will help to steal your account (even bank accounts)

Snograt · May 14, 2008, 04:32 AM // 04:32

Probably best to add "don't use peer-to-peer file sharing applications."

Lania Elderfire · May 14, 2008, 05:44 AM // 05:44

Quote:

Originally Posted by zamial

The truth about fire walls is that every machine needs only one. Having more than one is pointless.

Of course if you can have different "kinds" of firewalls and security just in case one of them fails or crashes. If you just have a software firewall, a virus or malware can easily disable it or the software firewall itself might even crash. That's where a hardware firewall comes in. An hardware firewall is much tougher to hack through and is usually very stable... and then lets say the hardware firewall fails then you can have other ways of protecting you such as a backup secondary firewall setup on a dedicated PC for example, or VPN on the local network with its own security protocol.

IMO a better analogy would be a "door" analogy. If you have multiples of the same firewall it's like having 3 locked doors in an hallway all with the same lock. If you have 3 doors with not only different locks but different and multiple locking mechanisms per door, alarms, pass codes, and proxy card usage... it's a lot more secure.

Of course all that security is a total PITA to use, and you have to have intimate knowledge of all the network security mechanisms which I don't have and most people don't have...

IMO it's best to have at least a hardware firewall and a software firewall that provides out-bound protection.