need help please =/ - Guild Wars Forums

Chronick · Sep 28, 2009, 10:51 PM // 22:51

so just a few days ago i went to a gold selling site not looking to purchase gold but i was just curious as to what their exchange rates were. I scanned my computer after i had visted the site since i was a little suspicious of whether a third party program might have been installed, but no virus or file of the sort was found; so I signed into my account shortly after but havent checked it until just today(4 day later) . Now, I cant seem to sign in, it appears as though my password is incorrect since my email is correct and there is no way i could have forgotten my password

my question is, is a keylogger the reason for this? is it possible for a keylogger to be installed onto my computer simply by visiting a gold selling site?

if i do have a keylogger, how do i get rid of it? I use AVG 8.5 and it doesnt seem to be able to find a virus or file.

If anyone has had the same experience or knows what to do in this situation, your insight would be much appreciated. Thanks to all

EDIT: i read the forum rules and it says that i cant ask questions that should be addressed to arenanet however i am looking for opinions/experiences that might help my situation. If that still violates the forum rules, please feel free to close the thread, i just thought that it may help those who might encounter this situation in the future. I think this is a case of where curiosity killed the cat, and it would probably be best if everyone knew not to be curious

Grim Aragorn · Sep 28, 2009, 11:27 PM // 23:27

Quote:

Originally Posted by Chronick

so just a few days ago i went to a gold selling site not looking to purchase gold but i was just curious as to what their exchange rates were.

sry but id say it serves u right.....

and no u cant get a keylogger simply by visiting a website, unless u downloaded something from them

Xenex Xclame · Sep 28, 2009, 11:47 PM // 23:47

To start, we didn't really need to know your story it will just make you have a hard time getting help,even if you said you didnt do anything wrong, you could have just asked if you can get keylogger from visiting a website, no need to say that it was a gold selling site,Anyways.

No you can not get a keylogger just from visiting a site,you have to download something, even if that something says it is GW hacks,because its easy for you to believe its a GW hack while it is actually just a keylogger in disguise.Or if it says its a "codec", the codec one is a common mistake by people.

You coul'd download Spybot Search and Destroy im pretty sure that is on of the many programs again keyloggers ( and many other unwanteds)Just do a google,you'll find plenty.

caballo_oscuro · Sep 28, 2009, 11:51 PM // 23:51

Ok so first things first, whatever your motivation for going to a gold seller, that's your business. I work in IT network security and here's my take on it, breakdown at the bottom:

If you access a website, how it runs is it contains a number of instructions your computer is able to interpret.

It is very easy to write an instruction telling your browser to run a program from a specified location or to download files like graphics, or even to install malicious software on your computer, especially if you are logged in to your pc as an admnistrator (check control panl->users to confirm)

If you did download malicious software it is possible for the author to use any of several techniques to hide the program from your anti-virus, but in all liklihood your antivirus won't recognise it anyway unless it's fairly common and on AVG's current watchlist (usually only about 30% of active and known infections are scanned for by any AV program).

So if you went to a gold seller's site, you may have downloaded a key logger. If you think this might be the case, best solution is hope you have a recent backup and get your machine clean installed.

To break that down:

1) If you are an admin on your computer it is easy for websites to install files. Run as a restricted or normal user

2) Your AV/anti-spyware/anti-adware programs aren't 100% reliable. Better than nothing, but no guarantee

3) If you think you might be infected, rebuild your machine

4) If you fear your account stolen, contact Anet with confirmation of your game keys and beg them to give you the acct back if you can't reclaim it yourself

Bob Slydell · Sep 29, 2009, 03:10 AM // 03:10

I don't think we're getting the full story here. You can't simply get a keylogger unless you download something from their website. Now they may have fooled you in a couple ways, one being to download some BS software to allow you to view their site (like a mozilla firefox or ANY browser type addon) if not then something else, like they injected their cache (which stores onto your HDD) the files of the keylogger to install on your computer. Whatever. The fact AVG says there's no virus is sorta bull sounding to me.

But again, not sure were getting the full story. If you want us to understand it more, tell us everything you did, lol.

Chronick · Sep 29, 2009, 03:58 AM // 03:58

Quote:

Originally Posted by Chrisworld

I don't think we're getting the full story here. You can't simply get a keylogger unless you download something from their website. Now they may have fooled you in a couple ways, one being to download some BS software to allow you to view their site (like a mozilla firefox or ANY browser type addon) if not then something else, like they injected their cache (which stores onto your HDD) the files of the keylogger to install on your computer. Whatever. The fact AVG says there's no virus is sorta bull sounding to me.

But again, not sure were getting the full story. If you want us to understand it more, tell us everything you did, lol.

lol im presume that you've made assumptions and think that i bought gold, well tbh, if i did there would be no point in posting here would there? Im 16 lol i couldnt buy gold even if i wanted to cause i dont have a paypal acc. In any case to my understanding i did not install or click on anything i should not have but its starting to seem like i did. Thanks to all for the help/input, i will update you all later on if you're interested

End · Sep 29, 2009, 05:21 AM // 05:21

My question would be....why would they want to hack the account of a potential customer? It seems more likely that you got any viruses elsewhere. It's just bad business. Especially since if the trade went over well people who buy once are likely to buy again. But if their account gets hacked right after a purchase (or in your case viewing the site) there going to connect the dots and loose a bunch of potential business...to me it just dosen't make sense.

VoodooNemesis · Sep 29, 2009, 05:38 AM // 05:38

Quote:

Originally Posted by Chronick

so just a few days ago i went to a gold selling site not looking to purchase gold but i was just curious as to what their exchange rates were. I scanned my computer after i had visted the site since i was a little suspicious of whether a third party program might have been installed, but no virus or file of the sort was found; so I signed into my account shortly after but havent checked it until just today(4 day later) . Now, I cant seem to sign in, it appears as though my password is incorrect since my email is correct and there is no way i could have forgotten my password

my question is, is a keylogger the reason for this? is it possible for a keylogger to be installed onto my computer simply by visiting a gold selling site?

if i do have a keylogger, how do i get rid of it? I use AVG 8.5 and it doesnt seem to be able to find a virus or file.

If anyone has had the same experience or knows what to do in this situation, your insight would be much appreciated. Thanks to all

EDIT: i read the forum rules and it says that i cant ask questions that should be addressed to arenanet however i am looking for opinions/experiences that might help my situation. If that still violates the forum rules, please feel free to close the thread, i just thought that it may help those who might encounter this situation in the future. I think this is a case of where curiosity killed the cat, and it would probably be best if everyone knew not to be curious

At least he/she is honest email is still the same so run as many virus scans you can get your hands on <-- follow the other GUYS ADVISE FORMAT. after that, change password sins email adress is still the same change that password to

gremlin · Sep 29, 2009, 06:47 AM // 06:47

Caballo has the right of it.

Many computers are wide open to attack since most are only protected against known threats.
Whatever they say about how good they are the average antivirus software works from a list of known threats.
If Its not on their list then its come right in and make yourself at home

So yes you could well have a keylogger.
Never go online as an administrator and block popups javascript and activx unless you know its safe.
Get a decent antivirus and firewall setup and seperate antispyware software if your package doesn't cover it.

Scan system often and always scan downloaded files manually before running them.
I'm not in IT just someone who has been around computers for a long time and learned from his many mistakes.

godis · Sep 29, 2009, 09:05 AM // 09:05

Google for: online virus scan
Use a coupe of the top results to search your computer.

Use a firewall that stops outgoing traffic/programs. Like Zonealarm, so you can see if anything new is trying to access the Internet.

Download a malware/spyware remover like malwarebytes, spybot or similar.

bsoltan · Sep 29, 2009, 12:06 PM // 12:06

I assume you've contacted GW Support to try and resolve the issue?

ac1inferno · Sep 29, 2009, 12:14 PM // 12:14

Start up in safe mode with networking and try this:

http://housecall.trendmicro.com/

Sep 28, 2009, 10:51 PM // 22:51	#1
Chronick Frost Gate Guardian Join Date: May 2009 Profession: A/W	need help please =/ so just a few days ago i went to a gold selling site not looking to purchase gold but i was just curious as to what their exchange rates were. I scanned my computer after i had visted the site since i was a little suspicious of whether a third party program might have been installed, but no virus or file of the sort was found; so I signed into my account shortly after but havent checked it until just today(4 day later) . Now, I cant seem to sign in, it appears as though my password is incorrect since my email is correct and there is no way i could have forgotten my password my question is, is a keylogger the reason for this? is it possible for a keylogger to be installed onto my computer simply by visiting a gold selling site? if i do have a keylogger, how do i get rid of it? I use AVG 8.5 and it doesnt seem to be able to find a virus or file. If anyone has had the same experience or knows what to do in this situation, your insight would be much appreciated. Thanks to all EDIT: i read the forum rules and it says that i cant ask questions that should be addressed to arenanet however i am looking for opinions/experiences that might help my situation. If that still violates the forum rules, please feel free to close the thread, i just thought that it may help those who might encounter this situation in the future. I think this is a case of where curiosity killed the cat, and it would probably be best if everyone knew not to be curious Last edited by Chronick; Sep 28, 2009 at 10:55 PM // 22:55..

Sep 28, 2009, 11:51 PM // 23:51	#4
caballo_oscuro Krytan Explorer Join Date: Aug 2008 Guild: Aura	Ok so first things first, whatever your motivation for going to a gold seller, that's your business. I work in IT network security and here's my take on it, breakdown at the bottom: If you access a website, how it runs is it contains a number of instructions your computer is able to interpret. It is very easy to write an instruction telling your browser to run a program from a specified location or to download files like graphics, or even to install malicious software on your computer, especially if you are logged in to your pc as an admnistrator (check control panl->users to confirm) If you did download malicious software it is possible for the author to use any of several techniques to hide the program from your anti-virus, but in all liklihood your antivirus won't recognise it anyway unless it's fairly common and on AVG's current watchlist (usually only about 30% of active and known infections are scanned for by any AV program). So if you went to a gold seller's site, you may have downloaded a key logger. If you think this might be the case, best solution is hope you have a recent backup and get your machine clean installed. To break that down: 1) If you are an admin on your computer it is easy for websites to install files. Run as a restricted or normal user 2) Your AV/anti-spyware/anti-adware programs aren't 100% reliable. Better than nothing, but no guarantee 3) If you think you might be infected, rebuild your machine 4) If you fear your account stolen, contact Anet with confirmation of your game keys and beg them to give you the acct back if you can't reclaim it yourself Last edited by caballo_oscuro; Sep 28, 2009 at 11:55 PM // 23:55..

Sep 28, 2009, 11:47 PM // 23:47	#3
Xenex Xclame Desert Nomad Join Date: Mar 2006 Guild: DPX Profession: R/	To start, we didn't really need to know your story it will just make you have a hard time getting help,even if you said you didnt do anything wrong, you could have just asked if you can get keylogger from visiting a website, no need to say that it was a gold selling site,Anyways. No you can not get a keylogger just from visiting a site,you have to download something, even if that something says it is GW hacks,because its easy for you to believe its a GW hack while it is actually just a keylogger in disguise.Or if it says its a "codec", the codec one is a common mistake by people. You coul'd download Spybot Search and Destroy im pretty sure that is on of the many programs again keyloggers ( and many other unwanteds)Just do a google,you'll find plenty.

Sep 29, 2009, 03:10 AM // 03:10	#5
Bob Slydell Forge Runner Join Date: Jan 2007	I don't think we're getting the full story here. You can't simply get a keylogger unless you download something from their website. Now they may have fooled you in a couple ways, one being to download some BS software to allow you to view their site (like a mozilla firefox or ANY browser type addon) if not then something else, like they injected their cache (which stores onto your HDD) the files of the keylogger to install on your computer. Whatever. The fact AVG says there's no virus is sorta bull sounding to me. But again, not sure were getting the full story. If you want us to understand it more, tell us everything you did, lol.

Sep 29, 2009, 05:21 AM // 05:21	#7
End Forge Runner Join Date: Jan 2008 Location: Rubbing Potassium on water fountains. Guild: LF guild that teaches MTSC (did it long ago before gw2 came out and I quit...but I barely remember) Profession: N/A	My question would be....why would they want to hack the account of a potential customer? It seems more likely that you got any viruses elsewhere. It's just bad business. Especially since if the trade went over well people who buy once are likely to buy again. But if their account gets hacked right after a purchase (or in your case viewing the site) there going to connect the dots and loose a bunch of potential business...to me it just dosen't make sense.

Sep 29, 2009, 06:47 AM // 06:47	#9
gremlin Furnace Stoker Join Date: Oct 2006 Guild: GWAR Profession: Me/Mo	Caballo has the right of it. Many computers are wide open to attack since most are only protected against known threats. Whatever they say about how good they are the average antivirus software works from a list of known threats. If Its not on their list then its come right in and make yourself at home So yes you could well have a keylogger. Never go online as an administrator and block popups javascript and activx unless you know its safe. Get a decent antivirus and firewall setup and seperate antispyware software if your package doesn't cover it. Scan system often and always scan downloaded files manually before running them. I'm not in IT just someone who has been around computers for a long time and learned from his many mistakes.

Sep 29, 2009, 09:05 AM // 09:05	#10
godis Frost Gate Guardian Join Date: Sep 2009 Guild: LOVE Profession: N/Me	Google for: online virus scan Use a coupe of the top results to search your computer. Use a firewall that stops outgoing traffic/programs. Like Zonealarm, so you can see if anything new is trying to access the Internet. Download a malware/spyware remover like malwarebytes, spybot or similar.

Sep 29, 2009, 12:06 PM // 12:06	#11
bsoltan Site Contributor Join Date: Dec 2005 Location: UK Guild: [SoF]	I assume you've contacted GW Support to try and resolve the issue?

Sep 29, 2009, 12:14 PM // 12:14	#12
ac1inferno Desert Nomad Join Date: Aug 2007 Location: Boston Guild: We D Shot Your Stances [GODS] Profession: A/W	Start up in safe mode with networking and try this: http://housecall.trendmicro.com/