Curse

stvt32 · Jan 25, 2006, 07:53 PM // 19:53

Last night I downloaded a program from a guy who said he had a program to help me create builds, a stupid thing on my part, but the guy sounded legit, and I didn't have any reason to not trust anyone before, so I downloaded it and when I got on this mornign my email thing at beginning was changed, and he hacked my email to confirm it, I have the original CD key, is there any way for me to get my account back? And what's a good program to remove key loggesr, the program was called Farcast Injector.

Savio · Jan 25, 2006, 08:12 PM // 20:12

Account: http://support.guildwars.com.

Dunno about Farcast whatever.

Kaguya · Jan 25, 2006, 08:15 PM // 20:15

Ouuch. Only way to get the account back would be emailing ANet's support about it, I don't know ANet's policy about stolen accounts so I don't know what kind of help they will offer.

And removing keyloggers.. I think standard-issue spyware removal programs should get rid of those as well, Ad-Aware, SpyBot etc. Googling for this 'Farcast Injector' doesn't give any results as all tho, so hard to help..

Try hitting CTRL+ALT+ESC, and check the process list for suspicious looking programs, and end process for them. Just be SURE to google/check otherwise that the program you are terminating isn't something usuful. Usually doing google search with the filename yields a process description from atleast one site. Then just search your HD for the file you terminated, and delete it. Running regedit, and searching for the file will wipe out the last traces of it, hopefully.

Lot of technobabble there, just ask if you want some parts clarified

EternalTempest · Jan 25, 2006, 08:18 PM // 20:18

If your using Windows XP, I would use System Restore and restore your system to the most current back up before you installed the software he gave in addition to running adware/spyware tools.

Start -> Programs -> Accessories -> System Tools -> System Restore

fiery · Jan 25, 2006, 08:21 PM // 20:21

having send A.net maybe they will say something about hacking that you installed not legit programs etc etc ect....just pointing some out and wondering cause i had some letter issues with A.net

dimirpaw · Jan 25, 2006, 08:26 PM // 20:26

This may be a bit harsh but here is how it is.

Anet has already stated not to download programs at all. It even states that when you run the game and scroll down in the text log. In other words, Anet doesn't need to even help get back your account because you have downloaded a program when they stated not too.

Your CD KEY may be the only thing that can get your account back, but please remember, don't expect your char. or items, gold or whatever you had before to be there anymore. Most people will clean out the accounts and delete the char/'s.

I strongly suggest you e-mail Anet with your problem and also ask if they would like you CD KEY as proof of buying the game in order to get your account back. I hope you can, but you need to learn later on. People on the internet and a lot of them are here for themselves and causing trouble. Don't download anything and always scan the files before running them... Treat your PC like you do yourself. You wouldn't just run into a semi-truck, so why have your PC do the same with virus and your account.

Well Good Luck Anyways!

Kaguya · Jan 25, 2006, 08:39 PM // 20:39

Quote:

Originally Posted by EternalTempest

If your using Windows XP, I would use System Restore and restore your system to the most current back up before you installed the software he gave in addition to running adware/spyware tools.

If someone is using Windows XP, I would suggest disabling System Restore right away, since it is, no matter how nice it sounds, a major security risk.

Viruses, spyware, malware, and other junk root themselves deep into system restore, so no matter how much you try to delete them, they will keep coming back thanks to this 'helpful' feature...

It's worth a shot, but I haven't ever seen system restore do anything good, only opposite with giving a safehouse for potential viruses.

Shattered_Glass · Jan 25, 2006, 08:53 PM // 20:53

first off, farcast is a program for a whole other game Diablo 2, it was used for cs amazons to attack from a distance and a few people(Koda) had combined a keylogger to the .exe file, so u downloaded a file for another game and double clicked the file, then the file observed ur keystrokes and would send them to a server where the person coudl see everything u typed adn therefore change your passwords, and im sure u restored ru computer by now so you cant take it to the police and have the person prosectuded , which is what anet woudl ask you to do. i had this happen to one o fmy older accounts on my computer at my dads house that the house had shared.

Loviatar · Jan 25, 2006, 09:33 PM // 21:33

Quote:

Originally Posted by Kaguya

Viruses, spyware, malware, and other junk root themselves deep into system restore, so no matter how much you try to delete them, they will keep coming back thanks to this 'helpful' feature...

.

there is a brute force way to clean out system restore of anything nasty in it.

reduce the file size to minimum.

simply create new restore points and eventually the last infected restore will be purged to replace it with a fresh one.

it worked for me on a real persistant ad pop up that nothing else would touch

Alias_X · Jan 25, 2006, 09:58 PM // 21:58

http://www.guildwarsguru.com/forum/s...d.php?t=111433

^ GREAT THREAD!!

awesome sauce · Jan 26, 2006, 02:06 AM // 02:06

You can use microsoft antispyware beta and most likely it will clear that keylogger right out make sure you go to scan options and select full system scan instead of smartscan.

http://www.microsoft.com/downloads/d...displaylang=en

edit: By the way, how do I go about diabling system restore?

Kaguya · Jan 26, 2006, 01:04 PM // 13:04

Quote:

Originally Posted by awesome sauce

edit: By the way, how do I go about diabling system restore?

Control Panel -> System -> System Restore [tab] -> Turn off System Restore on all drives.