Curse

Ravi Zacharias · Sep 03, 2009, 11:09 PM // 23:09

First of all, please do not close this thread, this is a legitimate question that I am looking for an answer to. I recently had a run in with a hacker on my GW account that took a while to get resolved. I have been told that this was my fault, that I must have put my own information out there to be taken or I must have cheated and it exposed me to hackers.

Now, I can defend myself to the hilt on this, and there will still be people telling me that I must be hiding something (I have read enough of these posts to know that much) but I am still worried that there might be some sort of software security flaw in GW. I just want to know if anyone else has experienced something similar to this, because I am confused. That being said, my account is still open (3 years+ strong) and at this point I have not been hacked recently (2 weeks), but I have had to reformat my main drive on my computer and start from scratch with Windows. I recently loaded the game back onto the HD and am hoping I don't encounter anymore problems, but even just today when I typed in my password (which I had written down because it was so complicated) it told me it was the incorrect login information and I had to change it again (which is similar to what happens when you get hacked, in case you didn't know). Now, none of my stuff or money is gone, so I am attributing it to user error, but I am very wary. I will keep you all updated in case you are interested. BTW, my in game name is Ravi Zacharias in case you want to chat/party in game. Until then, just keep on keeping on.

citizensmith1001 · Sep 04, 2009, 12:20 AM // 00:20

As far as i know the connection between your computer and the Guild Wars servers is probably about as secure as you can get ( or very close)if you have been ''hacked''or have the feeling your computer is still insecure after previous security issues then im sorry to tell you this but you must have either given someone your account info or if you have recently changed your login then you must have some type of keylogger on your computer.

I think that there is a guide to help you secure your computer stickied elsewhere on this forum plus a anti malware download that you can use.

Eskimoz · Sep 04, 2009, 12:39 AM // 00:39

Odds are you have a keylogger brah.

Run that virus scanner brah.

Bob Slydell · Sep 04, 2009, 01:41 AM // 01:41

There were waves of people having problems a while back and even one or two that I knew having odd problems like things missing from their inventories and such but mostly people getting straight up hacked in less than 5 mins away from the computer.

In all honesty...who HACKS an account with over 100k and some ecto stacks in PLAIN view of anything on a screen, yet only takes a few plat (just a few plat holding shift to break that few plat out of the 100+) and leaves the ectos???? This leads to evidence of some weird ass hacking going on in the game live somehow, don't ask me I just have the strongest feeling this is a problem.

Yes. I'm paranoid now, never used to be.

Ravi Zacharias · Sep 04, 2009, 05:39 PM // 17:39

Now, it looks like Chrisworld has actually seen similar problems to what I am talking about. This is exactly what happens to me as well, I will literally be in the middle of playing sometimes and it will tell me there has been a hardware problem and disconnect me, then within the next 5 minutes it takes me to reset my password (because GW says that I am entering the incorrect account info) I have been hacked and anywhere from 25-50k is gone as well as all valuable items..
Although I appreciate the first 2 responses, you both missed the main point, my HD has been completely wiped and GW is the ONLY program that was installed after the format. If this problem occurs again, it is not because of a keylogger or because I gave out my information (because I have NEVER given out my information). This leads me to believe that there is a connection security issue. At this point I have not encountered any more problems, but if I do, it won't be because of MY negligence.

Bob Slydell · Sep 12, 2009, 12:03 AM // 00:03

Quote:

Originally Posted by Ravi Zacharias

Now, it looks like Chrisworld has actually seen similar problems to what I am talking about. This is exactly what happens to me as well, I will literally be in the middle of playing sometimes and it will tell me there has been a hardware problem and disconnect me, then within the next 5 minutes it takes me to reset my password (because GW says that I am entering the incorrect account info) I have been hacked and anywhere from 25-50k is gone as well as all valuable items..
Although I appreciate the first 2 responses, you both missed the main point, my HD has been completely wiped and GW is the ONLY program that was installed after the format. If this problem occurs again, it is not because of a keylogger or because I gave out my information (because I have NEVER given out my information). This leads me to believe that there is a connection security issue. At this point I have not encountered any more problems, but if I do, it won't be because of MY negligence.

And I believe you, my response is a bit late but I won't be like most and say you are telling the entire story. I have not been hacked ever, but a couple people I know have had odd things happen to them over the past year that just don't make ANY sense at all.

KZaske · Sep 12, 2009, 02:52 AM // 02:52

I ran across someone during Dragon Festival that decided he did not like the looks of my toon and told me to leave. Naturally I told him to take a hike, to which he replied “Bye.” Seconds later Guild Wars shut down, when I checked our (my wife and I) router had reset, the IP stack in Windows had also been reset.
I have never been hacked, I don’t type in my password so there is no way a key logger would pick it up. I checked my router logs and found an old IRC command had been sent to the router which caused the router to reset, the Windows IP stack to reset and there by a guild wars error, basically an old style kick from an IRC chat room. I know that is not quite what you were referring to but it does show that there are vulnerabilities. By the way NCSoft support was useless; I have never gotten a reply beyond the auto reply. I don’t think I even have the screen shot anymore (taken just as he said “Bye”).
My point is that you can be sent a command by PM that will kick you off the server. I have no doubt that it is possible to inject other commands to gather whatever information they desire they might even be able to step into your open connection to the server if they are fast enough.
I am just giving you an overview of what happened. Yeah, I use to IRC a lot and I still have my old “IRC Wars toolkit” which is how I found the actual command used. Doing this to someone is very easy if they are using an Intel processor (thank to several Pentium bugs that still exist), a bit more difficult if you are using an AMD processor but it can still happen.

Edit: My wife says that this was fixed in an update because it was being used to kick people and force a win in PvP. I don't remember reading about that.

Bob Slydell · Sep 12, 2009, 08:14 AM // 08:14

Quote:

Originally Posted by KZaske

I ran across someone during Dragon Festival that decided he did not like the looks of my toon and told me to leave. Naturally I told him to take a hike, to which he replied “Bye.” Seconds later Guild Wars shut down, when I checked our (my wife and I) router had reset, the IP stack in Windows had also been reset.
I have never been hacked, I don’t type in my password so there is no way a key logger would pick it up. I checked my router logs and found an old IRC command had been sent to the router which caused the router to reset, the Windows IP stack to reset and there by a guild wars error, basically an old style kick from an IRC chat room. I know that is not quite what you were referring to but it does show that there are vulnerabilities. By the way NCSoft support was useless; I have never gotten a reply beyond the auto reply. I don’t think I even have the screen shot anymore (taken just as he said “Bye”).
My point is that you can be sent a command by PM that will kick you off the server. I have no doubt that it is possible to inject other commands to gather whatever information they desire they might even be able to step into your open connection to the server if they are fast enough.
I am just giving you an overview of what happened. Yeah, I use to IRC a lot and I still have my old “IRC Wars toolkit” which is how I found the actual command used. Doing this to someone is very easy if they are using an Intel processor (thank to several Pentium bugs that still exist), a bit more difficult if you are using an AMD processor but it can still happen.

Edit: My wife says that this was fixed in an update because it was being used to kick people and force a win in PvP. I don't remember reading about that.

Thats actually...pretty damn creepy. All in favor of logging on and going into offline mode say I!

Edit: How do you not type your password in? I'm assuming you type it somewhere like in a quick text box and CRTL+X and CRTL+V into the GW password box?

KZaske · Sep 13, 2009, 04:17 AM // 04:17

Quote:

Originally Posted by Chrisworld

Thats actually...pretty damn creepy. All in favor of logging on and going into offline mode say I!

Edit: How do you not type your password in? I'm assuming you type it somewhere like in a quick text box and CRTL+X and CRTL+V into the GW password box?

This is gonna sound weird, but I have two accounts and two installs of Guild Wars on each of the two computers. But that will skip most of the details of how I am able to access any two of the four accounts.
I build a shortcut to Guild Wars and rename it to the primary toon on a specific account, then I used the command line parameters to specify an email address, password and any other specific parameters I wish. For example; ("C:\Program Files (x86)\Guild Wars\Gw.exe" [email protected] [email protected] -perf -dsound) This specifies an account and allows me to access that account without fear of a keyboard logger. The -pref shows me how many frams per second and video processing data, -dsound keeps that nasty sound process that vista requires to work right from getting in my way. I use XP 64bit the (x86) denotes that Guild Wars is a 32bit application.

Wrath Of Dragons · Sep 13, 2009, 08:58 PM // 20:58

Quote:

Originally Posted by KZaske

This is gonna sound weird, but I have two accounts and two installs of Guild Wars on each of the two computers. But that will skip most of the details of how I am able to access any two of the four accounts.
I build a shortcut to Guild Wars and rename it to the primary toon on a specific account, then I used the command line parameters to specify an email address, password and any other specific parameters I wish. For example; ("C:\Program Files (x86)\Guild Wars\Gw.exe" [email protected] [email protected] -perf -dsound) This specifies an account and allows me to access that account without fear of a keyboard logger. The -pref shows me how many frams per second and video processing data, -dsound keeps that nasty sound process that vista requires to work right from getting in my way. I use XP 64bit the (x86) denotes that Guild Wars is a 32bit application.

Keep in mind that this is storing your password in plain text...maybe you cant be keylogged, but were someone to borrow your computer, it is right out there in the open. Please dont use the same pass for GW that you use for important accounts such as banks (common sense for some, an "oooooh" moment for others)

KZaske · Sep 14, 2009, 02:33 AM // 02:33

Quote:

Originally Posted by Wrath Of Dragons

Keep in mind that this is storing your password in plain text...maybe you cant be keylogged, but were someone to borrow your computer, it is right out there in the open. Please dont use the same pass for GW that you use for important accounts such as banks (common sense for some, an "oooooh" moment for others)

Very true. Both my wifes account on her computer and my account on both computers are password protected and required to log on or come back from the screen saver. On a side note; it's just my wife and I and we get a vistior about once every two months or so. I feel sorry for the guy that ever steals these computer, 35 seconds to log in from power up or the hard drives get wiped to mil-spec. Do you think I am paranoid?

Xiaxhou of Trinity · Sep 17, 2009, 04:48 AM // 04:48

I've been playing for 4+ years.
taken a 5 month break (about, may have been longer) from the game and when i tried to log back in today my password was incorrect.

I've been inactive for all that time and for some reason my password has been changed...wtf. I'm pretty pissed about it, and emailing support hasn't really given me anything productive yet.

Can anyone help me on the process of resetting my GW password? my old computer was wiped so I don't have any of my old screenies (even lost the two screenies i took of the two times i won halls with my name as leader ^^). The ONLY piece of evidence I may provide to establish my ownership of the account are all four access keys I have used.

Sk00pZ · Sep 17, 2009, 08:59 AM // 08:59

is your msn email the same as your gw account??? have u add anyone new on msn?? have u d/loaded any new u might just have a keylogger

refer · Sep 17, 2009, 10:13 AM // 10:13

I seem to remember an incident where a BUNCH of Guild Wars usernames and passwords were compromised. I suspect that is the OP's problem and maybe post 12's origin of problems. I cannot provide a link to where I heard of this, but it was quite recent on the official GW page or wiki, but kept rather hush-hush, if I do so say so myself.

Inde · Sep 17, 2009, 01:13 PM // 13:13

refer is talking about this:

http://www.guildwarsguru.com/forum/s...#post479397 6

You can see that post and the links within it to see if it sounds similar to your situation and how to resolve that.