Something seriously wrong with my restore

#0 - July 13, 2010, 12:04 a.m.
Blizzard Post
Hello!

Alright, so apparently about a week ago my account had been hacked into. I was locked out of my account for 24 hours and MalwareBytes found malware in my computer, I removed it, and I logged in the next morning with everything looking perfectly fine (like I was not hacked)

A GM emailed me a few days later and said that a specialist detected items were taken from me, which I didn't notice until I looked in my bank, and some stuff did appear to be missing and I thought my gold level had gone down (although it was not 0 copper). Today, literally 20-30 minutes ago, I was spoken to by a specialist GM, who made it very short and sweet, told me to log off so he could restore the items, so I logged off, then a few mins later, logged back in, the GM was gone (as was my chat with him, I was not able to remessage him) and I had mail from customer support. I first logged into my alt char (level 69 druid) to see what was taken there, and all of my current gear was GONE, wiped out totally. I had 0 copper (previously had around 1k, give/take) and it was all gone. I had mail filled with level 50s items, and HFP quest items. I was absolutely baffled.. I switched over to my pally ( the one I am posting on ) and ALL of my pvp gear was gone, all of my honor was gone, and I was completely lost at this point so I refiled a petition. I was sent back a complete load of items to my paladin, half of it being AV armor scraps and the medals and storm crystals.. (of which are intended to not be in your bag upon exiting AV, as you all know).

So, what it appears that we have here, is a half-assed restore with no effort put into, hindering my playing experience. I really would like a GM to please tell me what happened on this forum or for them to dispatch one to answer my petition right away because this is absolutely ludicrous.. thank you.
#1 - July 13, 2010, 12:07 a.m.
Blizzard Post
If you haven't done so already, Vorknic, please submit an in-game petition. It certainly sounds like something happened with the restoration, someone will get to you as soon as possible and take a look.
#4 - July 13, 2010, 12:30 a.m.
Blizzard Post
Q u o t e:
I have submitted a petition already but unfortunately I'm going to be sitting here for the next 10 days waiting for a response aren't I?


You shouldn't, Vorknic, follow up petitions are usually dealt with a lot faster. Just from taking a preliminary gander at your case it seems that this wasn't your standard compromise, it seems that this was a lengthy stay, which likely caused the results you received. It added a layer of complexity to the compromise that was not originally seen.

We'll see what can be done.
#7 - July 13, 2010, 12:35 a.m.
Blizzard Post
Q u o t e:
I don't know if I petitioned it as a "follow-up" though. I just reopened a brand new petition.. do I have to remake it as something else to get it classified as a follow-up?


That is all you need to do, Vorknic, it will be categorized appropriately from there. :)
#13 - July 13, 2010, 5:29 a.m.
Blizzard Post
Q u o t e:
Yeah, the blizzard support is great. I'm still in queue... do the follow up petitions really go quicker?


Yes, but they aren't instant, Vorknic. Your investigation is going to take a bit of time to complete. As I said it is far more complicated then originally though as your compromise seems to have happened multiple times, over the period of a month or more.

#17 - July 13, 2010, 5:46 a.m.
Blizzard Post
I'm not certain what information you are looking for, Vorknic. We won't be able to go into much detail regarding what may or may not have happened on your account. All I can really say is that it certainly appears to have been compromised and that it was accessed several times for over a month period.

An Investigator will look at when the account was apparently compromised and work to track down what happened. This is what can take awhile as there is a lot of information to go through.

#23 - July 13, 2010, 6:07 a.m.
Blizzard Post
Q u o t e:

I have a petition open. Restoration obviously took some kind of look and gave me back all of this random stuff and took all of my current stuff. There's something fishy here and I want to speak with a representative, that's all.


The investigation was conducted but the extent of the compromise was a bit more then originally thought, Vorknic. An error occurred, one that will be looked into and correct.

That is why you received what you did, because the restoration provided was missing some information. We are unable to tell you more because for any proper understanding we would need to go into how our compromise investigation processes work, how our tools work, and how the information stored. I tried to give you an idea of what happened by explaining that the compromise was a bit more extensive then we originally thought, I didn't intend to start an inquisition or panic you.

If you wish to provide feedback regarding what the investigator provided previously you are welcome to write to [email protected] but as I said, this matter will be looked into and we'll get this matter resolved.
#25 - July 13, 2010, 6:54 a.m.
Blizzard Post
Q u o t e:

Alright, well why should I have this petition open as you instructed me to do earlier then?


The petition is what is causing the issue to get looked into further. I actually spoke with the person who was working on your case and it seems that some light is being shed as to what happened. I'm afraid given what I have seen, and what it looks like happen this doesn't appear to be a simple compromise by any stretch. I'll refrain from saying more on the forum.

I think your best point of contact would be with our Account Administration department.

Account Administration
Webform: https://us.blizzard.com/support/webform.xml?locale=en_US
[email protected]