Post by dhampir1989
As you may read in my sig, I am a member of the Coven Of The Blue Panda, a group of us on the EU forums who help out people as best we can, for user-side issues, faster than the GMs can, due to their working hours.
A lot of people have been "hacked" lately, (I use the speech marks, as they are not true hacks), and I noticed there was no guide in the list of threads that actually addresses how to recover
from a compromise, so I decided to share with you one of our responses that covers just about everything you need to know, from the ground up.
If you still control your e-mail account, the following page is for you.Password Retrieval
European users: https://www.wow-europe.com/login-support/
North American users: http://www.worldofwarcraft.com/loginsupport/password.html
However, if it does not work for any reason, you should contact the Account Administration department via the web-form.Email Form
European users: http://eu.blizzard.com/support/webform.xml
North American users: http://us.blizzard.com/support/webform.xml?locale=en_US
The web-Form can be simply used as follows:
- Choose World of Warcraft
- Account Security
The guide bellow might be helpful as well. How to fill out a web form if your account has been compromisedhttp://forums.wow-europe.com/thread.html?topicId=142414281&sid=1#13
Once you have been granted access to your account, check if any characters or items appear to be missing. Should you find your character half-naked and as poor as a church mouse, contact a Game Master using the petitioning tool. Make sure to include the following information:
- When was the last time you logged in before you noticed the issue on your account?
- Do you suspect who accessed the account? If yes, who?
- Have you checked your PC for viruses and changed the password on your account?
- Please indicate the names and realms of all affected characters and name one or two major items that appear to be missing.
The use of a Blizzard Authenticator is highly recommended. You can get one from the Blizzard Store
European users: http://eu.blizzard.com/store/details.xml?id=221003132
North American users: http://www.blizzard.com/store/search.xml?q=auth
(choose the appropriate one)
You may also choose to download the iPod/iPhone app from the iTunes store or the Java app for a standard phone (http://mobile.blizzard.com/
This Blizzard support article has infomation on PC security and how to recover an accounthttp://eu.blizzard.com/support/article.xml?locale=en_GB&articleId=19385
Please be aware that keyloggers may go after other personal details than your wow account, such as online banking and email addresses. You should also check your email accounts auto forwarding feature to ensure nothing was set up there that shouldn't be
In addition to the guide provided by Blizzard this guide by Magekid is worth reviewing:
How to CLEAN your PC from Keyloggershttp://forums.wow-europe.com/thread.html?topicId=5383442401&sid=1
and advice tailored for MAC users can be found in this guide posted by Dimina
How to CLEAN your MAC from Keyloggershttp://forums.wow-europe.com/thread.html?topicId=9446265948&sid=1
For further peace of mind you could post a HijackThis log and combofix log to the Unofficial Support section on the coven's websitehttp://www.bamboo
bix.info/ (remove the space)
Remember that while our members will try to help our assistance is provided on a voluntary basis
Post by Krypter
Mmm, definitely a good compiliation for European players. There's a nice guide on the Customer Service Forum
which gives a pretty detailed explanation of what to do when an account is compromised: http://forums.worldofwarcraft.com/thread.html?topicId=14318909866&sid=1
Post by TheReal
Might want to clarify that last link. I'm not sure what it was supposed to have been, but the profanity filter put the smackdown on it.
Post by Baalah
I'd just like to add that if you have an account but haven't been active in 2+ months, check your main characters armory page. I've noticed some official blizzard emails about my account getting a faction change/authenticator/password+detail changes have been getting sent to my spam folder and getting deleted.
So if you have been getting spam emails and aren't sure if they are legit check your armory page and look at the achievements, if you have some new ones (most likely up to the 25k looted gold achievement) your account has been hacked.
I was unfortunate that my battle.net account was hacked and everything was changed. Because it's been 8 days before i realised the only thing i could do was ring Blizzards Account Services (info here: http://forums.worldofwarcraft.com/thread.html?topicId=24702231246&sid=1
) which is going to be the longest duration option left to you.
If you aren't hacked and think something is fishy, making a GM ticket in-game about your problems will not make you look stupid and if your server tickets take days to get read it may very well be the best thing you could of done. Even if you get hacked and it hasn't been answered your account will still undertake an investigation.