[Icemage]

Don't know why this wasn't done before, but I'm moving this discussion from Ask Square-Enix Questions to Frequently Asked Questions.


Icemage

FFXI Forum Super Moderator

[neenja_jenkins]

@Kailea: Well, that doesn't change the fact that it happened. I asure you I wish I was some internet teen starving for attention but that's not the case. I've had the computer up and running a few days, maybe a week, so not necessarily "brand, right out of the package" new, but i've hardly done any surfing with it at all. You're right, it doesn't make any sense at all, I'm completely dumbfounded.

I guess more detail is in order. Been playing XI for a few years, moved to 360 not long ago, and just got a bad@ computer and figured I'd move to it, seeing as how that would free up the TV for the miss. Installed XI roughly 3 days ago, logged in once or twice as I was doing the registry tweaks just to see how the different settings looked, other than that no actual playtime. My friend ask my yesterday morning, "hey what happened last night?"
Me:I have no idea what you're talking about, what?
Him: You never replied to me last night and ignored all my tells!
Me: I wasn't playing last night...?
Him: Well, someone was...
So obviously I've been hacked. Can't log in, info has been changed, etc. I've already called SE and gotten a new password, but I don't want to log in with the new password if I have a keylogger on my system. As I said above, I've scanned everything, found nothing, and I'm just generally dumbfounded. Could the keylogger be on my system? Could it have just been on some site and it nabbed my password? If so, how did they get the rest of my info? Playonline ID etc?

Arg.

[Durahansolo]

Originally Posted by neenja_jenkins

I've already called SE and gotten a new password, but I don't want to log in with the new password if I have a keylogger on my system.

You could still login on 360 and change the password though, which would be what I recommend to do. Otherwise you might be re-hacked by somebody that has figured out SE's generic password recovery/fix. I also recommend you order a security token from SE.

Lastly, I'm shocked that SE didn't make you fill out one of those account verification thingies. You got your account back very fast which is good.

[neenja_jenkins]

Originally Posted by Durahansolo

How do you know?


If the computer is brand new, how would you get a keylogger from an old visit?



So glad I didn't say it now :-). This probably is a really silly question Neenja, but you didn't "share" your account information did you?

I guess technically I don't know for sure... but my browser has an extension, and AVG tells me what sites are secure and what isn't, shouldn't that have warned me from visiting a compromised site? I'm sure it's not bulletproof, but I would have expected some sort of notification (not rhetorical, I actually don't know) I use common sense when browsing, and with the new rig haven't downloaded anything even remotely from a fishy sourse, nor have I even really had the chance to surf around at all?

I assure you I'm not as stupid your question suggests. I had a computer before, older system, not as secure, and I'm wondering if they nabbed my info from an older computer? Perhaps I visited the site on my POS computer, logged in, they got the info then? I used to use my character's name, so maybe they just got lucky and matched them up? Can they nab my info then and hack me now? I don't see how but I'm just examining all possibilities now... nothing is making sense here. I'm not a hacker, nor do I know how their systems work, again, looking for some insight here.

Negative. I haven't fallen for any type of phising scam or such nonsense.

I'm actually looking for help here guys. Not being a smart@, not screaming for attention, just literally coming in here hoping someone knows a little more than me on this matter, and is willing to help.

---------- Post added at 03:25 PM ---------- Previous post was at 03:20 PM ----------

Originally Posted by Durahansolo

You could still login on 360 and change the password though, which would be what I recommend to do. Otherwise you might be re-hacked by somebody that has figured out SE's generic password recovery/fix. I also recommend you order a security token from SE.

Lastly, I'm shocked that SE didn't make you fill out one of those account verification thingies. You got your account back very fast which is good.

Security token is on the way. No account verification 'thingies'. They did make my regurgitate alot of my old info though, old credit cards, old address, etc, which I'm lucky I happen to remember that stuff. I still haven't logged back in yet to see what damages have been done yet...

[Durahansolo]

Originally Posted by neenja_jenkins

Perhaps I visited the site on my POS computer, logged in, they got the info then?

Oh, I think I understand what you're saying now. You're saying its possible that you've used your login name (Which is now your ffxi character name) and the same password as a login for other sites on a older possibly infected computer. That's kinda what I thought, but I got lost. The situation does sound rather crazy, but it is still possible since RMT has the haxx.

[neenja_jenkins]

Originally Posted by Durahansolo

Oh, I think I understand what you're saying now. You're saying its possible that you've used your login name (Which is now your ffxi character name) and the same password as a login for other sites on a older possibly infected computer. That's kinda what I thought, but I got lost. The situation does sound rather crazy, but it is still possible since RMT has the haxx.

Haha!
Now we're on the same page! It sounds completely silly, I almost felt embarrased posting such an idea, but I can't think of any other possibilities. That, or they just brute forced it? My password wasn't exactly a strong one I guess...(I'll change that though!)

Now, I just gotta decide. Reformat, or believe that my system is clean? You think if my scans aren't finding it, and there is nothing running in the background that I'm not familiar with that it's on my system? Again, do you know if it's possible it's just invisible/stealth/etc? It isn't on my 'processes' tab.

[Kailea]

ok yeah that makes a bit more since, use the software keyboard in POL to enter your password, if your worried, that is alot safer then using the keyboard.

[frostburn]

ok i got my acct got they jus rolled it back a few days b4 it got stolen but i got it back like 3 weeks ago...It was a fast process thank god