WOW Account compromised

#0 - Sept. 18, 2010, 4:32 p.m.
Blizzard Post
Hi all,

I've just finished sorting things out after having my account compromised. I was able to get most of my items back when blizzard did a restore for me, thank goodness and thank you Blizzard!!!

I do have a question however - I have run 7 different anti-virus/malware/spyware apps (some of the multiple times) on my computer (using different products) some of which include Norton and AVG. Nothing was detected. And, yes, I made sure that I had up to date definitions, etc

What I am curious about - is there some other way that my password was compromised? I don't give it out, no one else has it, etc. Or, is it likely that all these different products have missed something?

I have detected nothing else suspicious as far as activity with any other accounts (email, bank, etc).

Anyone have any insights?

Thank you.


[edit: took out an extraneous "all" in the first sentence. I must have been thinking to type it one way and then changed direction and the word all made it sound weird. just one account, not "all"]
#11 - Sept. 18, 2010, 5:01 p.m.
Blizzard Post
Q u o t e:
I've just finished sorting things out after having all my account compromised. I was able to get most of my items back when blizzard did a restore for me, thank goodness and thank you Blizzard!!!

You are welcome, Phayge! I am sorry to hear of the compromise though and I hope you are able to narrow down how the compromise occurred.

Q u o t e:
I do have a question however - I have run 7 different anti-virus/malware/spyware apps (some of the multiple times) on my computer (using different products) some of which include Norton and AVG. Nothing was detected. And, yes, I made sure that I had up to date definitions, etc

What I am curious about - is there some other way that my password was compromised? I don't give it out, no one else has it, etc. Or, is it likely that all these different products have missed something?

We have quite a few programs on our website that are free or at least free to try. You can find the information here:

Account and Computer Security, Part 4
http://us.blizzard.com/support/article/30812

Q u o t e:
How did I run the scans? I guess "the normal way"? For example, with Norton - I downloaded the package and then ran the scans, etc. I didn't do anything out of the ordinary (as far as running anti-virus apps, etc).

Is there a better way/different way to run them?

Many players have found success in finding the malicious software by scanning with the game running. You do not need to be playing, simply being on the log in page will suffice. Enter in a fake email address and a gibberish password. Keylogging programs may not “activate” until the game begins. Otherwise they will tend to go undetected.

On a side note, you may wish to consider getting an authenticator to add further protection to the account:

Battle.net Authenticator FAQ
http://us.blizzard.com/support/article/24660

Battle.net Mobile Authenticator FAQ
http://us.blizzard.com/support/article/26109

Good luck!