Warning

there has been a keylogger here in the forum,
the thread was called dmg calculater witch
gives you a link to some hacking place
where they find your pass, and changes it.
my friend didnt know that, so he went in and now
he cant get into his account, it says that his
pass is wrong. We are mad about this especialy him,
he just saved up 100k (witch is alot for us

so if there comes a thread about a DAMAGE CALCULATER
do not download or go to the link,
I REPEAT DO NOT GO TO THE THREAD!

Yeah.. and dont take antibiotics when taking birth control. makes bad things happen.

/acknowledged

Also ban the spammer who posted it in the first place, as that is breaking both the EULA on Guild Wars and this Forum.

Thanks for the heads up but the best thing to say is dont link period. If that is the only one on here I'd be surprised. Stay away from links and such and you'll be fine.

DONT DOWNLOAD ANYTHING FROM NON-OFFICAL GAME SIGHTS YOU DO NOT FULLY TRUST!

If your friend really has had his password changed he can get his account back (and shouldn't be too hard).

Load up the GW client, you see the link for "Forgot Your Password?" that is under the password section? Tell him to click that and then enter the e-mail he used to sign up for that account and his password should be e-mailed to him if that was indeed the e-mail address he used to create the account.

so not all is lost! He should be able to get access back to his account by doing that.

But 1st of all he should delete that program and then run a few anti-spyware programs (Ad-Aware, Spyboy Search & Destroy, Spyware Doctor, Microsoft Anti-spyware to name a few) to ensure that his system is clean of any other spyware, malware, keyloggers, etc.

(btw, this is one BIG reason to never buy an account on ebay.. you pay the money, change the password.. and they just "Forgot Your Password?".. and bang you don't have access to it anymore.. which means they have made money and lost nothing!)

hmm ill tell him that when he gets back from holiday (left this morning)

Hmm, iirc, there's a way to change the e-mail address that the account is linked to - at least there has been on previous games using this system - so they keylogger may have changed which e-mail address the new password is sent to.

he may phone you, so write this down and tell him not to do anything stupid with his computer! We're always here to help!

Its not like you havent been warned.

i know stupid of my friend, but then link was a guildwarsguru link.. but if you just held the mouse over, it showd that it was somthing else

The person who got his account stolen should hurry to send that "I've forgotten my password" mail, because whoever stole it is probably using it for bots - and if ANet catches him, they'll ban the account.

It's not just downloads... simply don't go anywhere that offers this stuff... a keylogger doesn't necessarily have to download from a program, it can do it in a website too.

I got firewall, spyware prot stuff but they can't stop everything - when it comes to misery making people are wonderously creative.

My tip: For info visit only official fansites and keep in mind noone is 100% insured.

We try to find and delete posts like this as soon as they pop up. Sorry for your friend. I hope he manages to get the bug out of his system.

Realize too that it can log all sorts of passwords and information. Any site with a password (banks, EBay, credit cards, etc.) can be accessed with a trojan horse keylogger.

It's imperative that he clean his system with an antivirus and a keystroke logger "finder". Spyware Doctor is one of the best and has a trial version.

I'm immune to keyloggers and hackers because i very rarely log out of guildwars.

Personally I think he should go for broke and simply format and reinstall his operating system and files... better safe then sorry.

At the end of this I hope everyone remembers that there are people out there who can and will try and steal things like your password, you friend was foolish to download it.

But as stated before, you are warned each time you load GW, on the screen before you enter you password.

If the key-logger is a custom program, your anti-spyware, anti-virus programs won't ever detect them. Because work by detecting known signitures of virii/spy-wares.

As RTSFirebat said...your friend better do a reformat and hope everything becomes right again. I'd go as far as d/ling software from the harddrive manufacturer to perform a low-level format.

There are anti-keylogger/spyware programs out there that are quite inexpensive...some even with free limited usage. They are much simpler to use and less time-intensive than a reformat.

I would rather spend some more time to reformat to be 100% sure that i will not have keylogger than use trial programs who usulally dont have all services like customers versions , and i advise others to do the same , its ultimate solution for keyloggers victims.

WHOA! don't tell people to format their computers....that's about the dumbest suggestion you can possibly give someone.

to clear something up quickly... A trojan horse and a keylogger are two totally seperate ideas. A trojan horse allows an attacker to access the files on the infected computer much like you would the files on your own computer via a file manager style interface. Generally they consist of a client and a server(you download the server and become infected with it)...very rarely are these applications for any use other than messing around aimlessly on unknown victims computers...Unless you're America Online in which you've dealt with numerous IP tunnelling exploits and the 13 yr old kids that use them.(IP tunnelling is essentially the same idea of a trojan horse. It's for LAN only IP addresses and websites. They force the computer hosting the content to make an outbound connection to you..which emulates your presence on the LAN)

Keyloggers are simply little programs (generally can be done in 15-20 lines of code if you know what you are doing)..that keep track of every key that is pressed...normally in a configuration file on your hard drive. And they upload this information to either an email address...ICQ...or IRC bot(it can email but with the advances in Hex programs this method has been outdated for some years).


on that note...go Download Hijack this...run a scan. It'll pick up the keylogger.

an easier way to do this would be to open your Processes window "ctrl +alt +dlt"...depending on your version of windows/setup you might have to click the "Task Manager" button. Then click the processes tab and either search through for processes that shouldn't be running or post a screen shot of your active processes windowd here and I'll tell you how to remove the keylogger.