Hacked & Recovered - Trying to find the hack

#0 - Aug. 30, 2010, 4:04 a.m.

Hey all. For the first time ever (playing since Vanilla) I got hacked on Saturday (last time I go using the net on a brand new computer before installing an on-access blocker), I have a suspicion as to how, but not a certainty.
I managed to get to a clean computer at work while the hacker was still in my account, reset the password & added a mobile authenticator. Got to my wow machine, kicked off the hacker and a restoration has been done (hacked Saturday night, put in ticket at 9:30pm, stuff was restored when I got up Sunday morning - awesome service!), however I'm still trying to find the hack!

I've done full system scans with Avast, Malwarebytes and Spybot S&D, all using the latest updates, and all of them came up clean.
Can anyone suggest anything else I can use to try and find this hack or have these people started using "Snag password and auto-delete" cracks or something?

Orlyia

#7 - Aug. 30, 2010, 7:11 a.m.

Q u o t e:
I belive its pretty well known on the web right now. blizz had some problems thurs i think with the authin service, i have a authin on my account and i was hacked thank god for my password changes on my email adress or they may have goten that 2

For this access to have occurred, you need to look for a very specific type of malware - which can be very hard to find.

There are really only two options here - the code was given to them, or they have malware on your system and grabbed it when you tried to login.

It is still very important - even with an authenticator, to do your normal security checks and make certain your system is secure.

Have you downloaded any addons - and if so - where did they come from?

One common source we've seen for this is 'fake' sites that look very much like the real ones, but deliver addons with this little devil included. They even sponsor those links so they come up at the top of a search.

One needs to be VERY careful where they get their addons from.