EVE Search - Account hacked. Anything I can do?

Check My IP Information

All Channels

EVE General Discussion

Account hacked. Anything I can do?

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Pages: [1] 2 :: one page

Author	Thread Statistics \| Show CCP posts - 0 post(s)
Blaese Savion	Posted - 2009.11.02 20:26:00 - [1] Yes I emailed the GM, but it has been over 24 hours since I've sent it and maybe somebody has been in this situation before and I need to know if I'm screwed. So somebody took control of my account, paid to reactivate it then transferred my 13 million sp char off my account. Is there anything I can do at all or is it gone forever? I still have the account now but it's essentially worthless with my main character gone. This all happened on the 30th of October if that makes a difference. A bit off topic, but does anyone know of a good rootkit finder and remover(free hopefully)? My scanners came up with nothing after this happened so I'm super paranoid that he still has a keylogger or something still on my system. Thanks in advance for any help.
Schani Kratnorr x13 IT Alliance	Posted - 2009.11.02 20:29:00 - [2] Edited by: Schani Kratnorr on 02/11/2009 20:29:26 1. You have to wait for a reply from a GM. 2. If worried, re-install OS, EvE, etc.
Professor Tarantula Hedion University	Posted - 2009.11.02 20:39:00 - [3] Originally by: Blaese Savion A bit off topic, but does anyone know of a good rootkit finder and remover(free hopefully)? My scanners came up with nothing after this happened so I'm super paranoid that he still has a keylogger or something still on my system. Thanks in advance for any help. Buy an external hard drive to save what you want, and reformat every 6 months or when you suspect something is up. So much easier than researching a particular exploit for days. It only takes a couple hours, and if everyone did it suicide rates among hackers would skyrocket "but, but, i had him pwned :(". My deepest sympathies. Prof. Tarantula, Esq.
Janus Duo Gallente Down In Flames	Posted - 2009.11.02 20:50:00 - [4] Change your password immediately if you haven't already. It'd suck if you got your char back only to have it transferred off again though you might get some satisfaction in knowing whoever effed you over had to pay another $15.
Captain Tardbar	Posted - 2009.11.02 21:05:00 - [5] Originally by: Blaese Savion Yes I emailed the GM, but it has been over 24 hours since I've sent it and maybe somebody has been in this situation before and I need to know if I'm screwed. So somebody took control of my account, paid to reactivate it then transferred my 13 million sp char off my account. Is there anything I can do at all or is it gone forever? I still have the account now but it's essentially worthless with my main character gone. This all happened on the 30th of October if that makes a difference. A bit off topic, but does anyone know of a good rootkit finder and remover(free hopefully)? My scanners came up with nothing after this happened so I'm super paranoid that he still has a keylogger or something still on my system. Thanks in advance for any help. Question... By chance did you give out your API key to anyone recently or in the past? Or install any 3rd party apps for EVE? Either way... Usually CCP will restore stolen characters that are hacked, but I'm still curious how these things happen.
Ariel Dawn Perkone	Posted - 2009.11.02 21:06:00 - [6] Changing your password will do nothing if you haven't found the keylogger/trojan/etc. Reformatting is the safest bet if you can't find it, then change your password. CCP can restore your character(s) and ISK, but items sold/traded I think they don't do normally. However they are capable of doing the latter if you find a GM who is feeling sympathetic. CCP needs to get Authenticators for EVE. Would more or less remove 99.9% of compromised accounts (and bigger things like alliances being disbanded).
Blaese Savion	Posted - 2009.11.02 21:11:00 - [7] Edited by: Blaese Savion on 02/11/2009 21:12:44 It was a email. I know I'm an idiot. It was one of those "reactivate for X days", which I had JUST done a month ago through an email. It looked official(and I was looking at it very closely) but the url looked suspicious when I clicked on it, so I immediately changed my password and thought I was safe. He was able to get into my email, and convince the GM to unfreeze my account after they froze it because they noticed a suspicious IP trying to get into my account. It was interesting reading the sent messages between him and the GM, with him even signing my name at the end and everything.
Ariel Dawn Perkone	Posted - 2009.11.02 21:16:00 - [8] Originally by: Captain Tardbar Originally by: Blaese Savion Yes I emailed the GM, but it has been over 24 hours since I've sent it and maybe somebody has been in this situation before and I need to know if I'm screwed. So somebody took control of my account, paid to reactivate it then transferred my 13 million sp char off my account. Is there anything I can do at all or is it gone forever? I still have the account now but it's essentially worthless with my main character gone. This all happened on the 30th of October if that makes a difference. A bit off topic, but does anyone know of a good rootkit finder and remover(free hopefully)? My scanners came up with nothing after this happened so I'm super paranoid that he still has a keylogger or something still on my system. Thanks in advance for any help. Question... By chance did you give out your API key to anyone recently or in the past? Or install any 3rd party apps for EVE? Either way... Usually CCP will restore stolen characters that are hacked, but I'm still curious how these things happen. It doesn't happen often because EVE isn't a popular mainstream game like WoW and thus is targetted by malicious parties infrequently, however it's ridiculously easy to steal accounts. For example, you have Firefox with NoScript, and a leading brand of AntiVirus. You visit your coorporation website, scrapheap challenge, battleclinic, etc, which has been hijacked to run a script, and since in order to properly use that website you've allowed scripts. Norton, McAffee, etc do not see this script since they're ridiculously easy to bypass. The malicious party now has all of your information.
Cornaris	Posted - 2009.11.03 00:38:00 - [9] http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Discrodia Gallente Unknown-Entity Maru Ka'ge	Posted - 2009.11.03 01:14:00 - [10] I'm not much good with computer support, but if you can run every possible antivirus program you have. Buy some if you don't have any. Change your password a bunch, spam your email, try and **** him off if he isn't done with you. And wait for the GM response. Other than that, all I can say is that a 13m SP character isn't exactly the greatest steal ever to occur on EVE. Good luck w/ the whole thing. Chances are they will give you the character back at least, and probably get you replacements for anything you lost. I will provide a rebuttal as soon as Scotty, the posting manager allows.

Tommy Blue Arcana Imperii Ltd. Atlas Alliance	Posted - 2009.11.03 01:49:00 - [11] I was banned recently because of the same issue (multiple times for some screw ups, but nevertheless) and trust me, it takes at LEAST a week before CCP responds. I think it took about 2 weeks until i had my account unbanned.
Catherine Frasier	Posted - 2009.11.03 02:27:00 - [12] Originally by: Captain Tardbar Question... By chance did you give out your API key to anyone recently or in the past? Are you trying to suggest that giving out your API is a security risk?
Cadde Gallente 221st Century Warfare	Posted - 2009.11.03 02:34:00 - [13] Edited by: Cadde on 03/11/2009 02:35:53 Originally by: Catherine Frasier Originally by: Captain Tardbar Question... By chance did you give out your API key to anyone recently or in the past? Are you trying to suggest that giving out your API is a security risk? No, i think he is trying to suggest that giving out the API key is the same as giving out the password. He probably thinks the API key is some Super Admin access to the character so they not only can take control of the account but also his credit card and purchase pictures of girls on teh webz and send them to his mother. Also, for no apparent reason. All his friends will suddenly hate him and the sky will fall! In other words... Maybe? /sarcasm To whomever thinks the API key give any kind of control to anyone i can tell you that's not the case. They get to see what you have in your wallet, your current location and stuff like that. See but not touch! However, it is a risk if the one looking want to kill you! In game OFC. EDIT: To the op, make sure you change your API key so that no-one is looking at what you are piloting and so on. May save you your ships from gankers, pirates and enemies. My opinions belong to me, you can't have them!
Amanda Manton	Posted - 2009.11.03 03:40:00 - [14] I recently had one of my accounts banned. After i realized something was up and found out my acount had been banned i petitioned it and didnt get a response other than when trying to log in it said that the acount had been banned pending hacking investigation. I then got an email from eve support saying the petition had been closed and they wanted me to comment on it and it linked to the eve site but when trying to log on to view my acounts petitions i found my character was still "banned pending investigation" 5 days after i got the message my petion was closed my story is still the same and i created a new petition on another acount so that i could actually interact with a GM instead of just sending an email. Hopefully things look up soon since it was my main with 30 mil sp. All in all i think i learned that the (email version) of petitioning is a bit broken.
Chienka Di-Tron Heavy Industries Atlas Alliance	Posted - 2009.11.03 05:02:00 - [15] Next time you can not give out your password in advance! Need space? Atlas Rentals can help!
Criss AngeI	Posted - 2009.11.03 05:40:00 - [16] stop looking at wii ****
Nuzzy Futs Amarr Hedion University	Posted - 2009.11.03 06:00:00 - [17] Originally by: Ariel Dawn Changing your password will do nothing if you haven't found the keylogger/trojan/etc. Reformatting is the safest bet if you can't find it, then change your password. CCP can restore your character(s) and ISK, but items sold/traded I think they don't do normally. However they are capable of doing the latter if you find a GM who is feeling sympathetic. CCP needs to get Authenticators for EVE. Would more or less remove 99.9% of compromised accounts (and bigger things like alliances being disbanded). And how would that have stopped BOB from being disbanded? Awww Nuts.
goodby4u Valor Inc. Cosmic Anomalies	Posted - 2009.11.03 07:09:00 - [18] 1)Go to a friend's house or secure pc and change your password, DO NOT LOG ON AFTER THIS UNTIL KEYLOGGER IS GONE. 2)Run antivirus/rootkits, AVG among others normally does this well. 3)Check if said antivirus found it, if not reformat and redownload eve.
Scouteye Locasta Tactical	Posted - 2009.11.03 10:09:00 - [19] Originally by: Captain Tardbar Question... By chance did you give out your API key to anyone recently or in the past? Or install any 3rd party apps for EVE? Either way... Usually CCP will restore stolen characters that are hacked, but I'm still curious how these things happen. API has no connection to account hacking. It allows the VIEWING of certain character info, not specific account details or access to a users account in general. API is safe.
Blane Xero Amarr The Firestorm Cartel	Posted - 2009.11.03 10:09:00 - [20] Originally by: Nuzzy Futs Originally by: Ariel Dawn Changing your password will do nothing if you haven't found the keylogger/trojan/etc. Reformatting is the safest bet if you can't find it, then change your password. CCP can restore your character(s) and ISK, but items sold/traded I think they don't do normally. However they are capable of doing the latter if you find a GM who is feeling sympathetic. CCP needs to get Authenticators for EVE. Would more or less remove 99.9% of compromised accounts (and bigger things like alliances being disbanded). And how would that have stopped BOB from being disbanded? Wouldn't have stopped BoB But it would have prevented the CVA Disband. _____________________________________ Haruhiist since December 2008 Originally by: CCP Fallout :facepalm:

Kappas. Galaxy Punks	Posted - 2009.11.03 11:39:00 - [21] Took over 3 weeks i think for a corpmate to get unbanned a week or so ago for something similar. __________________
Blaese Savion	Posted - 2009.11.03 12:45:00 - [22] Alright, I'm almost positive there's still something on my system. My email will randomly log out when I tell it to stay logged in for 2 weeks, steam games will randomly say they're finished downloading, ect. I know people say to reformat, but what if I don't have the OS discs? Is there any other option? Is it possible to reformat without the OS discs? Could really use some help here.
Saju Somtaaw Gallente Diiamond Heavy Industries MagiTech Corp	Posted - 2009.11.03 12:57:00 - [23] You can re-format w/o the OS disks, BUT you can't reinstall windows. Call who ever you bought your computer from and ask them to send you the OS disks, though it'll probably cost you to get them again. ---- --- ---
Ralle030583 Mystic Lion Hearts Sev3rance	Posted - 2009.11.03 13:01:00 - [24] Just for the record for the idiots who try to panic. NOBODY CAN STEAL/HACK YOUR ACCOUNT WITH THE API. You can only download xml/csv files from EVE with some data. (depending on key limited/full you can see ingame strategic releavant informations like pos location,assets, wallets so dont give it to your enemys^^) but you don't even get the accountname with it... so the account stay safe...
RaTTuS BIG Libertas Fidelitas	Posted - 2009.11.03 13:10:00 - [25] 1) remove HD 2) plug HD into a known clean machine as a 2nd device 3) run a scan from that machine over your HD -- 3 Titans Lottery EB \| Capital
destinationunreachable Hello Kitty Fanclub	Posted - 2009.11.03 13:24:00 - [26] Originally by: Blaese Savion Edited by: Blaese Savion on 02/11/2009 21:12:44 It was a email. I know I'm an idiot. It was one of those "reactivate for X days", which I had JUST done a month ago through an email. It looked official(and I was looking at it very closely) but the url looked suspicious when I clicked on it, so I immediately changed my password and thought I was safe. He was able to get into my email, and convince the GM to unfreeze my account after they froze it because they noticed a suspicious IP trying to get into my account. It was interesting reading the sent messages between him and the GM, with him even signing my name at the end and everything. So you are saying, that you used the same password for your email as with eve ? Honestly, just don't do it...
Blaese Savion	Posted - 2009.11.03 13:56:00 - [27] Nah, they were different.
fuze Gallente Quam Singulari Cult of War	Posted - 2009.11.03 15:36:00 - [28] Originally by: Blaese Savion Nah, they were different. For your sake I just hope they are still different. Sucks for you. Let's hope it will get resolved asap.
Captain Tardbar	Posted - 2009.11.03 15:45:00 - [29] Originally by: Catherine Frasier Originally by: Captain Tardbar Question... By chance did you give out your API key to anyone recently or in the past? Are you trying to suggest that giving out your API is a security risk? Depends... Some EVE applications require you to put the user name or id in the string as well as the API. With the user name, hacking an account battle is half over. They just have to crack the password. Its more of a curiosity.
Blane Xero Amarr The Firestorm Cartel	Posted - 2009.11.03 16:24:00 - [30] Originally by: Captain Tardbar Originally by: Catherine Frasier Originally by: Captain Tardbar Question... By chance did you give out your API key to anyone recently or in the past? Are you trying to suggest that giving out your API is a security risk? Depends... Some EVE applications require you to put the user name or id in the string as well as the API. With the user name, hacking an account battle is half over. They just have to crack the password. Its more of a curiosity. Um. No third party tool requires your ingame Username. It uses your API ID and API KEY. Neither of those can be used to find out your Username and Password. _____________________________________ Haruhiist since December 2008 Originally by: CCP Fallout :facepalm:



Pages: [1] 2 :: one page
First page \| Previous page \| Next page \| Last page

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.