Compromised Account Permanently Disabled?

#0 - Sept. 14, 2010, 9:23 a.m.
Blizzard Post
My gf's account was recently compromised, a day or two ago she tried to log into the game and received the message that her account was on a 24 hour suspension. She has since changed her password, scans on her pc come up clean, etc. She emailed wowaccount admin to request character restoration, today she received an email for each character that had been restored, however when logging into the game she still gets a message saying that the account is temporarily disabled. When logging into account management it says the account is permanently disabled.

Why would the account go from 24 hour to permanently banned when there was no activity during that time?
Why would they restore characters to an account that was permanently banned?
What's going on here?

If a blue can help that would be great. The main character on her account is a level 80 gnome mage, Bunky on Vek'nilash. Yes, she has emailed wowaccountadmin about this, but as always, there's no telling how long it could take to get a response from them.

Edit:
She also never received an email stating the reason for the permaban, it simply went from 24 hour suspension to permaban with no warning, I was under the impression that you would always receive an email stating the reason for the ban, for example: exploiting the economy, spamming, etc.
#1 - Sept. 14, 2010, 10:07 a.m.
Blizzard Post
Well, I really can't normally divulge much to a 3rd party on an account, but this is pretty generic.

What is initially disturbing is you aren't reporting having found the source of this compromise. If her system is clean, it's something else. Compromised email, responding to a phish, using the same password/ID somewhere else - something.

This is currently locked awaiting word back that everything is secure and it is safe to unlock.

It is VITAL this NOT be done until she is absolutely certain whatever means was used to obtain her information is not still present.

I'd also heartily recommend adding an authenticator as an additional layer of security.

Blizzard Store
http://us.blizzard.com/store/browse.xml?f=c:6

Mobile Authenticator
http://us.blizzard.com/support/article.xml?locale=en_US&articleId=26109

Once she is certain they cannot get her information again, there is a webform to fill out. The good news is it looks like her restoration will be waiting for her when she gets back into game.

http://us.blizzard.com/support/article/securitywebform
#3 - Sept. 14, 2010, 10:31 a.m.
Blizzard Post
Q u o t e:
Oh, I see. So the account is not actually "banned", simply locked down until she proves its hers?


Until she assures us she is secure and ready to have it unlocked - yes.