How does keylogging work exactly?

#0 - Aug. 6, 2009, 10:11 a.m.
Blizzard Post
Ok, obviously I have some clue on how it works but I've been trying to piece my own experience together and it just doesn't make any sense. I recently reactivated my little brothers account and was leveling a mage on it for fun. Well about a day later in the morning I went afk to go for a run(getting in shape for the army or tryin to lol) and when I came back logged in all my keys were reset. So I was like hm ok, and as I was leveling I realized my gear was switched up a bit.

At first I thought I just must be getting paranoid but I've been hacked enough times before to know that I should probably do a virus scan(AVG). Didn't find any trojans or anything so after I figured I was clean I changed the password to the account and took a nap(my sleep schedules all sorts of messed up). Woke up at maybe 4 pm and I tried logging in, but my password didn't work. Must have been right after all. Went to my e-mail and they sent me a password reset e-mail and suspended my account for 24 hours while I was sleeping(guess I should be grateful even tho it DOES suck).

So best case scenario, I got rid of the key logger, shortly after blizzard suspended my account(because of the events earlier that morning) and everything will be fine when it becomes unbanned.

Worst case scenario, I still have a keylogger that isn't detectable by avg and I'm in for more frustration.

The account in question isn't shared with anyone, my little brother has been inactive for about 4 months(just sits in front of the tv playing GTA 4 all day, dno how he can stand it).

Not much to it right? Well this is where you come in because I am absolutely clueless. If I did have a keylogger why didn't the hacker(if you can even call him that) not go into my account, change the e-mail(it stands to reason he'd have access keylogger and all) and change it, change the password ect. Just seems like he only went half way...

So maybe I misunderstand but are key loggers only limited to the Wow.exe? Why do they go for the silver when they can go for the gold?

AVG's always been tried and true for me in the past(can't say its the first time I've gotten hacked), is there any other way I can check for keyloggers? I really would hate to have to reformat my computer.
#1 - Aug. 6, 2009, 10:14 a.m.
Blizzard Post
AVG is mainly for viruses. What are termed keyloggers are a different type of malware.

You want to run something aimed at those.

If I was a betting mammal, I'd say you are still infected and/or the email account is also compromised and they are getting information straight from an inbox.

This sticky should prove useful.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available Mon-Fri, 8am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283

#16 - Aug. 6, 2009, 11:40 a.m.
Blizzard Post
Q u o t e:
gah, that means that the suspended account isn't safe either because when I changed the password from the request that Bnet sent me he got that too, but I can't change the password on my own because the accounts still suspended. Is there anything I can do about that besides wait til the min, the account is unbanned and change it?


You could try to call Billing in the morning and request a password change. A petition would work as well, but I'm afraid at the moment that may be too late to stop subsequent damages.

Billing and Account Services
Phone Support - 1 (800) 59-BLIZZ (1 (800) 592 5499)
Live Representatives Available Mon-Fri, 8am to 8pm Pacific Time
E-mail Support - [email protected]
    Players in Australia should call 1-800-041-378
    Players in Singapore should call 800-2549-9273
    Players in Chile should call 1230-020-5554
    Players in Mexico should call 001-888-578-7628
    Players in Argentina should call 0800-333-0778
    All other international players should call: (949) 955-0283


Do let them know you found the source so they don't think you are reporting a repeat performance :)