Toon Hacking/Account Stealing/Keylogging Consolidated Thread

[Petgroup]

Originally Posted by Flybait

Ain't that the truth, whenever someone brings a virus'd up computer to me first thing i do is take off norton, and yeah, it's always norton, then install avast, because not only does it work, but it's free.

I find this image funny that Norton has on there home page:



Norton 2006 is horrible even by Norton standards.

[TJandDanna]

Man, after hearing all this I should probably remove Norton from my Web TV.
Seriously though, I use AVG and i heard you mention a program Petgroup that had a free scan to detect keyloggers. I dont see the thread so would you mind repeating where I can find that.
Also, anyone know if AVG detects key loggers?

[Flybait]

keyloggers fall under the same general category as trojans in most virus definitions, and are covered by all the antivirus programs that actually do more than "optimize" your computer by making it run at half speed.(norton)
once you get a trojan in it can install a root kit, which is what i think pet was talkin about with that webroot stuff i think it was called. a root kit is where a virus is stuck in, in such a way that it cant be seen by the user, and is hidden from the explorer shell and regedit.

[Gtwo]

ALL of the above detect old key loggers, so any program you run will stop the threat the 15 year old kid found on haxrus forums and got you to download. The problem is there are allot of new key loggers made everyday. So none of them work on new treats...the best AV is the user.

[Petgroup]

Originally Posted by TJandDanna

Man, after hearing all this I should probably remove Norton from my Web TV.
Seriously though, I use AVG and i heard you mention a program Petgroup that had a free scan to detect keyloggers. I dont see the thread so would you mind repeating where I can find that.
Also, anyone know if AVG detects key loggers?

Heres the direct link to the download from Webroot:

http://www.webroot.com/shoppingcart/...21&vcode=DT03A

Keyloggers is just one of many things it prevents/removes from your computer.

Just in case anyone cares, I nuke my entire system every month and reinstall Vista. Obviously I don't nuke my external hard drive with the ISO's of the programs and music I have but thats always fully scanned anyways. Vista SP1 is also out of beta and can be downloaded from Microsoft as of this week. If you have a cracked copy though, I advise against it ;(

Only another 20min though till my fully activated x64 Vista Ultimate SP1 is done downloading!

[TJandDanna]

K. thank you.
For now I seem to be clear (according to AVG) but reading all these posts just brings me further to the realization that I really dont know shit.
Thanx for the link. Im going there now

[Oswaldor]

Originally Posted by Gtwo

While a bot program is an easy target and there software can easily be manipulated to gain access to much more information on a pc other than MMO passwords. I dont feel those type people/companies have the desire to infect your PC and steal info anymore than Sony does when u install EQ2 on your PC. Yes it would be just as easy for SOE to hack your info as it would be for the bot you run Sqee. But eventually everything comes out......the truth will find its way out sooner or later. My guess is the bot you subscribe to doesn't want to loose your business or be sued any more than SOE, so there not going to invade your privacy. I could be wrong but, honestly when SANS, McAfee, and other sites have publicly announced the issue/problems Ill take there word for it before I consider yours.

Yeah it is almost certaintly not a bot program. In itself EQ2 is probably not even worth the effort to hack. But if a RTM company is behind this, then piggy-bagging the eq2 logger with a WoW logger is justifiable (from an economic perspective).

Considering that all this is also hitting WoW folks, then it is safe to say that it is something more generic. The guildportal thing (and similar vulnerable sites) seems to be on the money - their response to the problem reaks of incompetence and they also tried to hide it up by keeping their mouth shut initially. Their logs can probably help alot, but somehow I doubt they will publish those.

Why they attackers want to do this might be more interesting. If SOE / Blizzard are quick they can trace alot of the hacked accounts and the money transfers from these - could be a gold pot in terms of identifying RTM companies, illicit RTM'ing (and thus ban the players who buy). Although the actual internet traffic is probably proxied through some innocent unpatched machine somewhere, the actual money transfers should be identifiable as illegal behaviour. Perhaps some good might come of this.

[TJandDanna]

Thanx petgroup, really good piece of software. I am apparently clear (other than some cookies) so that is very reassuring to know =)

[quasigenx]

Originally Posted by Oswaldor

Fixed IP addresses is not an option - proxies, dynamic ip addressing etc.. makes it infeasible.
If the attack is directed at EQ2 then they can snatch up the key while they log your password - the key has to be stored somewhere on your computer.

Neither of these objections are necessarily valid.

While some people may use dynamic IPs and proxies, many do not. It would be an opt-in protection, after all. It would work for me.

The CD key could be stored on the hard-drive, without requiring the CD to be inserted. I would be surprised if that was not the case already. Making sure it's not in plain-text and easily accessible is slightly harder but do-able.

No protection is perfect. I don't need to be 100% secure (that's impossible). I just need to be more secure than the average user, and the hackers will go after them instead.

[Iadien]

Originally Posted by Petgroup

Just in case anyone cares, I nuke my entire system every month and reinstall Vista. Obviously I don't nuke my external hard drive with the ISO's of the programs and music I have but thats always fully scanned anyways. Vista SP1 is also out of beta and can be downloaded from Microsoft as of this week. If you have a cracked copy though, I advise against it

I format every 3 months and thought I was bad. haha