Could it be ? ...

Discuss census information here
Post Reply
archangelic
Posts: 4
Joined: Sat Jan 06, 2007 5:33 pm

Could it be ? ...

Post by archangelic »

OK , i just find out this page by searching my account name on google ... You see i've resently lost my account , hacked i suppose , and i wonter could it be able to hack an account because of census ?

I had no trojan on my pc cause i scan it , i don't play from any internet cafe or some but i had census with out knowing what it was doing so you understand that was a suprise to me seeing my chars names and lvl and class in here ...

So is it able to happen or not ?

Ty

User avatar
Alanthus
Updater Extraordinaire
Posts: 334
Joined: Tue Aug 23, 2005 11:38 am

Post by Alanthus »

No, census had nothing to do with you getting hacked.

The most common ways of getting hacked are:

- Sharing account/password with someone else
- Using easy to guess account/password (character name as account and "password" as password is not uncommon unfortunately)
- Writing down your account/password in an accessible place
- Visiting unreliable or hacked websites that install keyloggers etc.
- Getting a virus or trojan through other means that open your computer to others

Census might have been a way for hackers to find your characters name but not only are there other ways for them to find your characters name (a simple /who in game) but your account should never have the same name or an easy to guess password.

That you scan your pc is nice but it does not guarantee that you have no trojan, virus, keylogger or other malware on it, few products out there recognize more than 90-95% of known threat and most scanning products lag behind the malware creators by anything from days to months. Even if you scan all the time you still need to think about which sites you visit.
Image Image

User avatar
DM.
Census Taker
Posts: 1130
Joined: Mon Oct 03, 2005 12:27 pm
Location: Toronto, Canada

Post by DM. »

Lately several very popular WoW related websites have gotten hacked into and keyloggers placed on ads and elsewhere so that when someone clicks the link it will download the keylogger onto your computer without you knowing because it took advantage of a small flaw in your web browser.

Invest in a good virus scanner, firewall protection software, spyware program, etc....

Personally I use Norton Antivirus, Norton Personal Firewall, and Norton Anti-Spyware. All this was included because my ISP partnered with Yahoo and they offer something called Yahoo Online Protection, which you are already paying for in your monthly bill and you get it free.
Image
Click my sig

Balgair
Araiceil
Posts: 1716
Joined: Fri Sep 30, 2005 11:47 am
Location: UK

Post by Balgair »

I'd recommend using more than one protection program, too - I have Norton Antivirus for antivirus, plus ewido (now AVG antispyware), Spybot Search and Destroy, Ad-aware and SpywareBlaster... so far that combination has kept me safe, and fingers crossed that it continues to do so!

One of my guildmates was hacked a couple of months back, and he'd been regularly using antivirus and antispyware, but the programs he had didn't pick up the keylogger - he only found it when he installed ewido :(

Skyfire
Trolling Enforcement
Posts: 708
Joined: Thu Aug 18, 2005 2:29 am
Location: New Jersey

Post by Skyfire »

Balgair, there's another AVG program out there :), called AVG Anti-Virus.
Admin on WoWWiki
Moderator, Blogger on Wowhead

Balgair
Araiceil
Posts: 1716
Joined: Fri Sep 30, 2005 11:47 am
Location: UK

Post by Balgair »

I know, got it on my laptop as I couldn't be bothered paying for a 2nd installation of Norton ;)

archangelic
Posts: 4
Joined: Sat Jan 06, 2007 5:33 pm

Post by archangelic »

- no
- no
- no
- no
and again no ...

nothing of those u said was happen .

I am not a noobe user about pc's . I know how a keylogger worcks . I know how page trojan works . I know how to protect my info's ...

I didn't visit any page at all that might had a key logger as far as i know cause the only page i was viewing was allakhazam (witch the account i have in there has nothing common with my wow acc ) and thottbot (where i don't even have an acc ...) . If i need a hack or something for a programm that i use for fun (and i am not willing to pay 1000 euros just to play with an image programm , exuse me for being cheap :) ) and not as a work i use interent cafe where i don't care at all if a trojan would ba d/l cause they have much stronger security than a home network ...

Also i never put an account , page or game , in an internet cafe cause i am not so sure that they don't have a trojan ... So i don't play from other pc's ...

Account name might be easy on find out or if someone wonned that account name might knew it allready ... allthose password couldn't be that easy cause exept from latin characters had also numbers (cause wow force u to use ) . As it is about the secret question answer , you should have guess by now that not even I can answert it , cause I didn't put anything of my common and usually responce .. Ironic ...

Didn't share my acc with noone else ... Exept my hasban witch i trust ...

That was all flocks ... If you find out how i was been hacked please informe me to know too ...


Ty all for your responce and be carefull (kinda ironic cause i was and look what happend ...)

Take care all

User avatar
oiseaux
Posts: 363
Joined: Mon Oct 24, 2005 5:00 pm
Location: Butler, PA

Post by oiseaux »

You probably got it from the WoW boards. They take someone's account that they compromised through some sort of means and use it to post threads about topics that were already previously posted such as guild recruitment posts, boss kills, fake/real patch notes, or just random stuff like Ashkandi is a Hunter weapon to get people to think it is a credible post.

If you visit the WoW boards often, I would start thinking about the posts you have clicked on and then go from there. Anything that has the letters "wow999" in the domain is a keylogger (from my experience on the WoW forums). I have heard that the Peons gold site has a keylogger embedded in the front page.

Before going and blaming others, you are the only one that can allow an exe to run and install on your computer. And like a few others have said, those anti-virus softwares are known to not be detected. All though I hate Norton. That thing in itself is a virus lol. It is best to do manual scans on your computer and do a google search for each exe that runs when wow is up. If you get hacked again , then you know that it is still on your computer somewhere.

User avatar
DM.
Census Taker
Posts: 1130
Joined: Mon Oct 03, 2005 12:27 pm
Location: Toronto, Canada

Post by DM. »

archangelic wrote:allakhazam (witch the account i have in there has nothing common with my wow acc ) and thottbot (where i don't even have an acc ...)
Both of those sites are owned by IGE, which is the company behind all the gold selling, power leveling, and account hackings that have taken place. And it doesn't matter if you have an account on there or not, that is irrelevant. What matters is that you visited a page, it contained code that took advantage of a small hole in your web browser. It downloaded the keylogger to your computer without you knowing. You launched WoW, the keylogger records the data you entered. Transmits that data to some computer without you knowing. They collect the data, then when the times comes and they need gold your account gets hacked into. Simple.

Looking for information on quests, npcs, items, and other data? Wowhead.com... No ads, no keyloggers, no bull $4!7

World of Warcraft mods cannot collect information about your password at all. Because the mod is loaded only after you reach the character selection screen and is loading. Some mods do collect your account name. After look inside the WTF folder where you installed WoW and you'll see your account name as a folder right there. Blizzard has made it pretty restricted on what mods can do in the game. And one thing is transmit data outside of the game. Which is why sites like Warcraftrealms have you upload your data manually once the game is closed because there is no way to get that data within the game. Blizzard doesn't allow it at all.

The reason you got a keylogger was because you visited a website that was hacked into and downloaded a keylogger to your computer without you knowing. Those 2 websites you listed Allakhazam and Thottbot are most likely the cause. If you know so much about keyloggers then get better security for your computer.
Image
Click my sig

archangelic
Posts: 4
Joined: Sat Jan 06, 2007 5:33 pm

Post by archangelic »

Honey as i said i don't even log in at the wow page what forums are you talking about ? je ...

Dm even if that you say about those sites is true ... um ... tell me ... why only my account was hacked and not my hasbands ? we play form the same pc ....

So people it might be something else and if it is something else (not mods not pages not a thing) that means we r in a dificult situation ... Think about it ...

User avatar
Rollie
Site Admin
Posts: 4783
Joined: Sun Nov 28, 2004 11:52 am
Location: Austin, TX
Contact:

Post by Rollie »

If only your account was hacked and your husband's was not, and you both play on the same PC, then my bet is that someone was able to figure out your account name and password.

Pure speculation though...
phpbb:phpinfo()

User avatar
oiseaux
Posts: 363
Joined: Mon Oct 24, 2005 5:00 pm
Location: Butler, PA

Post by oiseaux »

Rollie wrote:If only your account was hacked and your husband's was not, and you both play on the same PC, then my bet is that someone was able to figure out your account name and password.

Pure speculation though...
Yeah...It could be that or you logged into WoW on another computer that had a keylogger on it.

And to the OP, you said that you do not log onto the WoW boards. You do not need to log onto the WoW boards to get a keylogger. All you have to do is click on a URL and then it begins to download the keylogger through various holes in your web browser's scripting. Or it asks you if you want to download and you click OK. Then it gets your account name and password when you go to log onto WoW. When wow.exe begins, it triggers the keylogger to start logging every single keystroke. It creates a txt file somewhere on your computer, which gets sent back to the keylogger's owner. Personally, I would start searching your password through the search function of your computer and see what .txt files pop up. That would be the first step I would do. There are many things you could do to protect yourself, but you just seem like you want to blame everyone but yourself. :?

Personally, if I were ever keylogged, I would change ALL my passwords from eBay, paypal, my online banking, and my credit card payment site.

It targets WoW but if you surf while you play WoW it is possible that it has other information as well.

Groyff
Posts: 11
Joined: Wed Jul 27, 2005 5:14 am

Post by Groyff »

Just a couple of thoughts:

Since you found your Account Name on this site you have to have the same name on your character as on your account, at least if it was your character that you found.

Im not sure how much in detail u know of census, but basically all characters in WOW (several millions) are stored here. That doesn't mean that you have submitted anything, most likely you have not since you didn't know what census is or does. Anyone on your realm and faction can submitt data on all that are online when he/she take a census including your character name, lvl, race etc.

If you are sure about not having malicious software, I'm guessing easy password, like a name all in small letters and a couple of digits after.

You could also used a hacked version of uniuploader often used with census which is a .exe that uploads data...If I were a account hijacker, thats the way I would go about it.

Hybuir
Gear Dependent Squirrel
Gear Dependent Squirrel
Posts: 1471
Joined: Tue Sep 06, 2005 6:22 am
Location: Austin, TX
Contact:

Post by Hybuir »

Social hack? very possible.

archangelic
Posts: 4
Joined: Sat Jan 06, 2007 5:33 pm

Post by archangelic »

"You could also used a hacked version of uniuploader often used with census which is a .exe that uploads data...If I were a account hijacker, thats the way I would go about it."

That was interesting .... do you have any knowlege where this a.exe might be uploaded on the pc ?

But still i can't be something on pc cause as i said before my husband account is still ok ...

The only thing that makes sense is for someone to wont that account name but still he would deleted the characters and start a new one ... As far as i know the chars are still in , how do i know that ? well i've noticed that when u send an in game mail with something in it if the character name doesn't exist the mail returns to the sender . So i mailed my chars a wool and never rutern back to me ...

well i suppose someday blizzard will sholve that mistery :)

User avatar
Sianni
Goddess
Posts: 291
Joined: Sat Sep 10, 2005 9:57 am
Location: West Coast, USA

Post by Sianni »

Did Blizzard at least ban your account when you reported it hacked? I would think they would at least suspend it or something while they investigated...

Groyff
Posts: 11
Joined: Wed Jul 27, 2005 5:14 am

Post by Groyff »

Groyff wrote:You could also used a hacked version of uniuploader often used with census which is a .exe that uploads data...If I were a account hijacker, thats the way I would go about it.
This is purely speculation from my part, as I haven't experienced it or even read about it. But since any exeutable that have gotten permission to access the internet is a potential risk...hacking a software often used by Wow:ers would be the thing to do.

User avatar
DM.
Census Taker
Posts: 1130
Joined: Mon Oct 03, 2005 12:27 pm
Location: Toronto, Canada

Post by DM. »

Groyff wrote:
Groyff wrote:You could also used a hacked version of uniuploader often used with census which is a .exe that uploads data...If I were a account hijacker, thats the way I would go about it.
This is purely speculation from my part, as I haven't experienced it or even read about it. But since any exeutable that have gotten permission to access the internet is a potential risk...hacking a software often used by Wow:ers would be the thing to do.
Thats why Blizzard says that you should use the Blizzard Launcher program to start WoW, and not other programs to start WoW. The Launcher program also detects some keyloggers as well.
Image
Click my sig

Post Reply