Account Hacked (then restored) still question

#0 - Sept. 8, 2010, 11:55 p.m.
Blizzard Post
This is my first time experiencing an account being compromised. I'm usually very safe about what sites I go to, and what links I click on (my husband works for the DoD doing Computer Security). I've just completed a scan of my system using AVG, and was unable to find any vulnerabilities.

The whole issue started today when I received an email from Blizzard stating that my account was suspended for in-game spamming. I logged in to battle.net and was able to change my password, but I noticed that there were like 30 characters on my account now, all level 1, with odd names (including this one). My only single legitimate character was deleted. Go figure.

I've installed the Authenticator on to my account (I didn't know I could use it on multiple accounts) but now I'm still stuck wondering if my system is still compromised.

My husband has gone through the Firewall logs and website listings, and has not found anything suspicious. The only sites out of the "norm" that I've visited were Thottbot and WoWhead to look up some quest information. However, I use Google Chrome, and that eliminates a lot of the malicious scripting.

If someone can point me in the right direction to find where the vulnerability is, it would be greatly appreciated. I'm not so much worried about my level 20 mage, but more worried about my email accounts and the internal network of our household.

By the way, my real character is Valyni, but apparently it's not available for use on the forums quite yet.

Thank you.

Edit - Yes I did read through the post above regarding Security.
#1 - Sept. 9, 2010, 12:01 a.m.
Blizzard Post
While I'm unable to provide specifics, I can provide you some good informative links that may lead you in the right direction. =)

Account Hacked? Security Issue? Look Here!
http://forums.worldofwarcraft.com/thread.html?topicId=24702231244&sid=1

Battle.net Account Security Awareness
http://us.battle.net/security/

Account and Computer Security
http://us.blizzard.com/support/article/30794

One good trick to try would be to run your anti-virus or anti-spyware programs while the World of Warcraft launcher is open, or at the log in screen. Some of the more sneaky malware can hide inside the program and be undetectable unless the program is active. Other options to consider would be to change the e-mail associated with your Battle.net account from a know secure system, and to make sure you pick distinctly different passwords between your e-mail address and your Battle.net account.