Curse

Angel Killuminati · Aug 19, 2010, 07:12 PM // 19:12

Hi, let my start off with some background information. I'm not a new player, I've been playing Guildwars for a very long time and no all too well about internet security, as I design and upgrade computers as a part time hobby/interest. What happened today though was quite annoying.

During my browsing of the web, I thought I encountered a trojan, possibly a keylogger. As Guildwars is my favourite game, this worried me dearly, so much so that instead of wasting time, giving the potential hacker an opportunity to jump onto my account, I tried changing my password right away.

I clicked the link on the log in screen, and entered my e-mail. No e-mail arrived, so I did some research and it suggested that accessing my password and altering it as such, would require to enter the PlayNC website, because at some stage I had purchased the various content online - after I'd originally purchased Guildwars Factions through retail when it was first released.

So, the PlayNC website requested my log in details for that website, and as it had been years since my last purchase on there, dating 2007, I have no idea what my log in details were. I made a new one, trying to enter the serial numbers that I had stored, and no success. None would enter. Retrieving your details, isn't as simple as requesting an e-mail with the details included. You have to contact support directly, and wait for them to reply!

To try and cut a long story short, to save myself from potential account stealing, when all I wanted to do was change my password quickly, I deleted the name of the character on the log in screen, (the extra security Anet implicated) - as I entered this characters name, AFTER I had a malware scare. If it indeed was a keylogger then it couldn't access my account now, as that character is deleted - a 4 year old character of mine. Sad times.

I've clean sweeped my system and reinstalled my OS. A simple, procedure for extra security. Just to be safe.

All this has stemmed from not being able to change my password with ease. I understand that Anet put in steps for accounts to be secure, but I'm sure it would have taken over a week for me to change my password, more than enough time for a potential hacker to grab my details, and strip my account.

I'm not overly bothered by erasing my character, as it's only a game and I have plenty more characters, it's just a shame really. Has anyone else had problems with changing their passwords? Hearing from others, trying to change a simple password is a nightmare, with you getting sent back and forth from various websites and e-mail forms.

Lawliet Kira · Aug 19, 2010, 07:29 PM // 19:29

They shouldn't link accounts to NcSoft just because you bought something off the store! Anyways...what website could you have possibly gone on that had a trojan on it?

*lemming* · Aug 19, 2010, 08:06 PM // 20:06

Did they change something? I'm fairly sure you can change your password ingame, even on a PlayNC-linked account.

Savio · Aug 19, 2010, 08:32 PM // 20:32

I don't get it - you deleted the character yourself or someone else did?

Leighwyn · Aug 19, 2010, 08:47 PM // 20:47

Quote:

Originally Posted by Savio

I don't get it - you deleted the character yourself or someone else did?

He was concerned that someone had his GW login information, as well as the answer to the "What is a character name on this account?" security question. To prevent someone from gaining access with this information (since he couldn't change the password), he deleted the character with the compromised name.

Angel Killuminati · Aug 19, 2010, 08:49 PM // 20:49

Quote:

Originally Posted by Leighwyn

He was concerned that someone had his GW login information, as well as the answer to the "What is a character name on this account?" security question. To prevent someone from gaining access with this information (since he couldn't change the password), he deleted the character with the compromised name.

Yeah, but it's all done now. It was more of a precaution more than anything. I was just a bit 'miffed' with the amount of effort needed and websites to visit in order to alter a password.

First time I attempted it, and I won't be doing it again.

Grunntar · Aug 19, 2010, 08:50 PM // 20:50

Sorry to hear about your loss, but be warned that it may have have done no good at all!

The old name is still associated with your account, and will be until someone else uses that same name on their account.

I have a guild mate that uses a name in his friends list that I created (and deleted) during the Beta Weekend Events. It's still associated with my account, though there's no way I can log in to that character since it was deleted long ago.

While I can't guarantee that this is the case with login security, you should be able to test it. Try logging in with the old (deleted) character name, and see what happens. If it still works, you might try to get a friend to create a character by that name on their account. Since it's not associated with your login, both of you should be safe after this.

End · Aug 19, 2010, 08:55 PM // 20:55

Quote:

Originally Posted by Angel Killuminati

Yeah, but it's all done now. It was more of a precaution more than anything. I was just a bit 'miffed' with the amount of effort needed and websites to visit in order to alter a password.

First time I attempted it, and I won't be doing it again.

Ya know...any character on the account will work right? I commonly switch between my ele, mes, and sin when I type in the security question....

Soo was it the only char on the account?

Angel Killuminati · Aug 19, 2010, 08:57 PM // 20:57

Quote:

Originally Posted by Grunntar

While I can't guarantee that this is the case with login security, you should be able to test it. Try logging in with the old (deleted) character name, and see what happens.

I tried that right away, and you couldn't access my account because the player didn't exist anymore. The error message popped up straight away. That was good.

Has anyone else tried getting in contact with support through PlayNC website etc, the long route, and if so how long does it take on average? The deletion of my char was a swift act, just to be on the safe side. I'd still very much like to change my password in the near future though.

Quote:

Originally Posted by End

Ya know...any character on the account will work right? I commonly switch between my ele, mes, and sin when I type in the security question....

Soo was it the only char on the account?

Yes, you're right, any char will work on the login name.

But it was the character name I entered whilst suspecting a downloaded torrent was a possible bit of malware - therefore I deleted just that character. The check sum didn't really make sense, and I checked it with various software, getting some saying malware etc.

I hold my hand in the air, I know you have to be careful online, trust me, but it's the first time I've had a problem like this in years, so what can ya say...

The thread was more of a question about the depth in which you need to delve in order to change a password. Great security, but in practice, not so great. Perhaps I'm the only one. It reminded me of the EA website I have used many times in the past to retrieve lost accounts. That's a flippin' nightmare - I've lost many a strand of hair.

Wynthyst · Aug 19, 2010, 10:29 PM // 22:29

It's pretty common knowledge that if your account is tied to a master account (NCsoft, or PlayNC) that the reset password option in the login screen will not work. If you are able to login, you should use the Change Password option that is available in the Edit Account section you will find on the bottom of the character selection screen. If you are unable to log in (you've forgotten your password), you need to change your password through your master account. If you are unable to remember your master account details your only option is to contact support. Once you have a master account, you cannot add the same game accounts to another.

http://wiki.guildwars.com/wiki/Guild..._p assword.3F

I recommend people look for answers before they start deleting characters, or taking other drastic actions.

Femmefatal · Aug 20, 2010, 06:14 AM // 06:14

If the OP was smart as he says he/she is he would have had an auto login/password system setup where you don't have to press any keys when you log into the game. I click on my GW icon and I'm in and it's pretty easy to setup. So, no symphathy from me.

Cherrie · Aug 20, 2010, 10:10 AM // 10:10

Quote:

Originally Posted by Grunntar

I have a guild mate that uses a name in his friends list that I created (and deleted) during the Beta Weekend Events. It's still associated with my account, though there's no way I can log in to that character since it was deleted long ago.

While I can't guarantee that this is the case with login security, you should be able to test it. Try logging in with the old (deleted) character name, and see what happens. If it still works, you might try to get a friend to create a character by that name on their account. Since it's not associated with your login, both of you should be safe after this.

I doubt this is the case - I am pretty sure that friendlist is based on AcountId server side, the name that was typed to create the connection is retained for players' ease of use.

I think you should be able to test it too: first, check if the name you used in Beta has been reused (try adding it to your friend list) and if not, try using it on login screen.

TheodenKing · Aug 20, 2010, 01:33 PM // 13:33

Angel, I feel for you, but you didn't need to delete your character. That was an overreaction out of panic. More importantly, you should be aware that you should not have fields automatically filled in. Uncheck the box on the login screen that says "Automatically fill in..."

Info that is "automatically filled in" is indeed stored on your hard drive.

Angel Killuminati · Aug 20, 2010, 02:32 PM // 14:32

Quote:

Originally Posted by TheodenKing

Angel, I feel for you, but you didn't need to delete your character. That was an overreaction out of panic. More importantly, you should be aware that you should not have fields automatically filled in. Uncheck the box on the login screen that says "Automatically fill in..."

Info that is "automatically filled in" is indeed stored on your hard drive.

I'm in the process of getting my account returned to me now, I guess it was an over reaction but it turned out to be fruitless anyway.

I played AB yesterday, left and tried to change my password only for my details not to be registered. Someone has altered my details. I can't log in anymore.

I've contacted support, showing them a shed load of details, CD keys, photographs etc, had a reply from Merrick, so I guess I have to wait now. The longer it takes though, the more damage that can be done I guess.

In about 8 years of playing online this is the only problem I've had, as I said, I'm usually very good with security, but I guess mistakes happen.

I'm not overly bothered about getting all my items back, it would be nice, but it doesn't concern me as such, even though those items are from 4 years of playing, I only PvP now, have done for the past year, so PvP chars are easy to kit out. Still a shame though.

I just want my account returned above all else.

Age · Aug 20, 2010, 05:38 PM // 17:38

I always do a scan before I log in to GW using spybot.

Femmefatal · Aug 21, 2010, 12:48 AM // 00:48

I use Malwarebytes it's much better.

MArcSinus · Aug 21, 2010, 04:56 PM // 16:56

I always use the Windows on-screen keyboard for logging in (and all my forums/games have different passwords of course), beat that keyloggers!!!!

Xydrych · Aug 21, 2010, 06:48 PM // 18:48

The character name security feature wasn't too great, neither was the linking of a PlayNC account.

jazilla · Aug 21, 2010, 08:21 PM // 20:21

just go to only safe sites lol. i have never gotten malware because i dont go to shady sites.

Femmefatal · Aug 22, 2010, 12:05 AM // 00:05

The really smart thing to do is have two computers and only use one computer to goto forums and websites and the other for gaming. That's what I do also. I have the perfect setup and room with air conditioner cooled computers.

) I still use auto logins though and rarely have to type on my gaming computer except game commands.