Everyone change your passwords already. WTF? - Page 5

Hoss · 03-19-2008, 03:51 PM

Quote:

Originally Posted by Petgroup

You can see where the file is located by clicking the little arrow next to "System Monitor found: keytrap"

It will tell you right where that file is. Post where it says here if you want my opinion on it.

Heres what the web shows and it looks like you are fucked:

Edit:Upon further review, it looks like someone you know is spying on you like a girlfriend/wife. Thats my opinion but I could be wrong.

KeyTrap

And since I'm such an asshole you get a free year subscription to Webroot Antivirus with Anti Spyware. Just PM me if you want it and ill give you the keycode and the version 5.5 download.

I'll do that tonight when i get back home. And I will also take you up on the subscription, but what do you have to do with webroot? Do you work for them? The biggest reason I don't trust them is because the program I downloaded for the free scan tried to install a piggyback toolbar, and that sort of shit raises flags with me. So, since you seem to know a lot about them, whats up with that?

Not likely that anyone i know is trying to spy on me. Everyone knows all I do on that computer is play EQ2 and since I do play EQ2, i obviously don't have a GF or any sort of social life.

Also, keytrap comes up with a lot of different programs in a google search. The one you linked is the worst looking one. I thought of two more possibilities. One, I own a full version of KGB keylogger (got it to help a friend spy on his wife) and the install files might be on the machine somewhere. Its possible webroot is using 'keytrap' as a generic name. If thats it, I'll be able to tell when i see what directory its in. Second, when i built this machine a few months ago, norton tech support made me install something called logmein so they could move my subscription to the new machine, and then they did not tell me how to remove it. I might have missed part of it when i tried to rip it out by the short hairs.

I'm pissed at the idea that someone would even try to hack me. If this is for real, I hope i find out who it was.

-h

Hoss · 03-19-2008, 03:52 PM

Oh yeah, I'm too busy (read lazy) to look it up, how the hell do i change my password?

-h

Petgroup · 03-19-2008, 04:11 PM

Quote:

Originally Posted by Hoss

I'll do that tonight when i get back home. And I will also take you up on the subscription, but what do you have to do with webroot? Do you work for them? The biggest reason I don't trust them is because the program I downloaded for the free scan tried to install a piggyback toolbar, and that sort of shit raises flags with me. So, since you seem to know a lot about them, whats up with that?

Not likely that anyone i know is trying to spy on me. Everyone knows all I do on that computer is play EQ2 and since I do play EQ2, i obviously don't have a GF or any sort of social life.

Also, keytrap comes up with a lot of different programs in a google search. The one you linked is the worst looking one. I thought of two more possibilities. One, I own a full version of KGB keylogger (got it to help a friend spy on his wife) and the install files might be on the machine somewhere. Its possible webroot is using 'keytrap' as a generic name. If thats it, I'll be able to tell when i see what directory its in. Second, when i built this machine a few months ago, norton tech support made me install something called logmein so they could move my subscription to the new machine, and then they did not tell me how to remove it. I might have missed part of it when i tried to rip it out by the short hairs.

I'm pissed at the idea that someone would even try to hack me. If this is for real, I hope i find out who it was.

-h

Yeah version 5.5 added that stupid toolbar thing but I always do custom install and uncheck that. Everyone should do custom on any program they install because of things like that. Adobe wants you to install Google etc.

I am absolutely nothing atm.

I use to do computer repair/service for a company for the last 2 years but quit. I used Webroot on customers computers when I worked there.

I now am starting my own computer repair company doing the same thing but not making them rich while I do all the work. I am going to use Webroot with that also. It works, its user friendly, it doesn't slow down computers and I have yet to go back to a customer to remove any new viruses. Thats good because they are happy but bad because I prevent them from paying me more money

I applied to become a Webroot authorized partner yesterday but that means I get to use there logo and get a few dollars off there products. It will still be cheaper for me to buy it in the store though. I just want the logo rights.

So as of right now, I gain absolutely nothing. I just figured I'd help people on here for free compared to $125 an hour plus $69 for the software if I came to your house. Yes people are more than willing to pay those rates in my area.

If Webroot makes a trillion dollars this year, I will gain $0.00. I don't own any stock but now that you mentioned it I might do some research. The last stock I bought was Sirius before Howard Stern went there. I lost bigtime and don't plan on repeats. Hell I was even going to buy Apple stock and its lost $50 or so over the last few monts, same thing with Google. Can you tell I have an iPhone? Those are the stocks on there by default

Hoss · 03-19-2008, 09:20 PM

Well at least i figured out where the program came from. I was mostly right with my initial thought. Its not a keylogger, its designed to keep certain windows system keys from working. But its not anything EQ2 uses, its from some backups i have of programs from work.

Next question, how do i stop all the freakin alert popups? Up to like 1000 now. And how can I tell what programs are even trying to access those sites? The alerts were coming up when nothing else was running except the webroot updater.

-h

Petgroup · 03-19-2008, 10:41 PM

Quote:

Originally Posted by Hoss

Well at least i figured out where the program came from. I was mostly right with my initial thought. Its not a keylogger, its designed to keep certain windows system keys from working. But its not anything EQ2 uses, its from some backups i have of programs from work.

Next question, how do i stop all the freakin alert popups? Up to like 1000 now. And how can I tell what programs are even trying to access those sites? The alerts were coming up when nothing else was running except the webroot updater.

-h

After you install Webroot, install alerts for programs trying to add themselves to autostart options, only happen after Webroot was installed. Meaning if you have Webroot installed now, then install AOL 3 weeks later, an alert will come up for that.

What you are saying about the 1,000 alerts thing seems like Webroot is blocking a trojan from replicating. Whats the alert say its for?

Cunningham · 03-20-2008, 12:02 AM

Wanted to say thx to soe. They had me fully restored and ready to play with in 30 mins of opening. Customer service was ready and on the ball and I was literally in game 30mins after they picked up the phone.

Also wanted to say haha to the botter. He got me out of doing Venrill cubes. My guild also followed him and griefed him after mezzing him in raid zone and keeping him at like 5% health so he couldn't call out. This and all of everyone in nagafen exile seeming to petition for me. Soe had my account banned almost within the hour.

I didn't lose a thing except a title but who cares anyway.

Also got some great advice if you think you might have a problem or a key logger. Someone told me spam type before putting in your password so it would be hard to pick out of the typing. Another solid idea was to change your account info from another PC so that if a logger is still active it wont pickup new changes.

Cunningham Haxored'of the exiled

Petgroup · 03-20-2008, 02:00 AM

Quote:

Originally Posted by Cunningham

Wanted to say thx to soe. They had me fully restored and ready to play with in 30 mins of opening. Customer service was ready and on the ball and I was literally in game 30mins after they picked up the phone.

Also wanted to say haha to the botter. He got me out of doing Venrill cubes. My guild also followed him and griefed him after mezzing him in raid zone and keeping him at like 5% health so he couldn't call out. This and all of everyone in nagafen exile seeming to petition for me. Soe had my account banned almost within the hour.

I didn't lose a thing except a title but who cares anyway.

Also got some great advice if you think you might have a problem or a key logger. Someone told me spam type before putting in your password so it would be hard to pick out of the typing. Another solid idea was to change your account info from another PC so that if a logger is still active it wont pickup new changes.

Cunningham Haxored'of the exiled

So you got hacked, soe restored you, now what the fuck prevents this from happening again? For the love of god you people are fucking unbelievable. If you got hacked by a keylogger, its still on your fucking computer. Making a phone call to SoE did not magically remove it.

Quote:

Originally Posted by Cunningham

Also got some great advice if you think you might have a problem or a key logger. Someone told me spam type before putting in your password so it would be hard to pick out of the typing.

Thats some top notch advice there. To bad keyloggers log every fucking thing. So if you type in aabbccddeeffgg as your password, you still have to erase or backspace it to type in your real password, it logs the deletes. So the great advice you received and decided to post here for others to read it is 100% bullshit.

Unfucking real.

gandulfy · 03-20-2008, 04:45 AM

Quote:

Originally Posted by Petgroup

So you got hacked, soe restored you, now what the fuck prevents this from happening again? For the love of god you people are fucking unbelievable. If you got hacked by a keylogger, its still on your fucking computer. Making a phone call to SoE did not magically remove it.

Thats some top notch advice there. To bad keyloggers log every fucking thing. So if you type in aabbccddeeffgg as your password, you still have to erase or backspace it to type in your real password, it logs the deletes. So the great advice you received and decided to post here for others to read it is 100% bullshit.

Unfucking real.

If someone truly is getting keyloggers on peoples systems through something it would explain alot.
Although most keyloggers are not smart enough to detect mice, ie they do a keyboard hook but not a mouse hook so you can select/delete with mouse but thats just stupid.

In the end you shouldn't have a keylogger on your system, if you do it needs to be removed. I think the biggest question here is where is this coming from, ie the keylogger, if it truly does exist.

PS if you have a keylogger on your system changing your password is REALLY REALLY stupid, now you answer your secret question and input your new password and the keylogger has ALL of your info.

If this is a keylogger its obviously coming from a program that is being installed from a webpage or through a seperate program. It would need to be something many people use such as ACT (just a random program) etc. Or as many have suggested it could be a flaw in guild portal but most people that have reported being hacked say they have diff user/pass on those pages.

Hoss · 03-20-2008, 06:34 PM

Quote:

Originally Posted by Petgroup

After you install Webroot, install alerts for programs trying to add themselves to autostart options, only happen after Webroot was installed. Meaning if you have Webroot installed now, then install AOL 3 weeks later, an alert will come up for that.

What you are saying about the 1,000 alerts thing seems like Webroot is blocking a trojan from replicating. Whats the alert say its for?

It was blocking access to a bunch of websites. The messages were all along the lines of "Spysweeper has blocked access to www . manonmangaysex . com because it is on the list of potentially harmful websites" or shit like that. (I only remember manonmangaysex.com cause i wrote it down so I could check it out later.) It looked to me like it was just giving me a popup for every single website on its blacklist. For about the first 30 or so, I was thinking they might be sites I had been to and gotten cookies from or something (even though I don't accept cookies by default, some still seem to slip through), but when it got the gaysex crap, I figured it had to be some sort of fuckry going on with webroot itself. It started when i started updating webroot, and lasted for a solid 15 minutes. It stopped shortly after I fired up EQ2, so I'm not even 100% sure it ever stopped. the popups could have been coming up behind the game window.

Quote:

Originally Posted by Petgroup

Thats some top notch advice there. To bad keyloggers log every fucking thing. So if you type in aabbccddeeffgg as your password, you still have to erase or backspace it to type in your real password, it logs the deletes. So the great advice you received and decided to post here for others to read it is 100% bullshit.

Unfucking real.

I think its bullshit advice (cause, like you said, you should be getting the keylogger off of your computer), but there is nothing stopping you from typing the garbage into wordpad. Some keyloggers (like the one I bought for my buddy) logs mouseclicks too though. It won't tell you what was clicked, but it has entries for [Mouseclick: Left] [Mouseclick:Right] and I think it even told us when the focus window was changed. So, typing garbage might help if they didn't get the full version.

-h

Sqee · 03-20-2008, 06:39 PM

Quote:

Originally Posted by Ily

Why aren't you guys changing your PWs like every day now?
There are so many hacks happening atm, its just stupid.
So everyone scan your shit and change your PWs.

BTW, did every server just come down?

i cannot change my password because i must have spelled the answer to my secret question wrong... I have lost the orig disks to EQ2 so i no longer have my account key code, and i could no more pull the numbers of CC's i used last year out of my ass any more than i could the previous 3 years i've been playing this game.

So... SoE wount reset my secret question, and i cannot change my password...