Forum Settings
       
Reply To Thread

Keylog Attack ~How My Story Ended~Follow

#277 May 22 2007 at 7:10 AM Rating: Default
Scholar
****
6,631 posts
I did read, but I think we just share different views in customer support and business ethics :P So I try not to argue too much on that.

Long story short, this argument should have ended. I need to focus more on my work , then people being ignorant over the internet. I know I try my best to not to compromise my computer, that is most important :P (and everyone should do that too)

Edited, May 22nd 2007 11:12am by scchan
____________________________
Amanada (Cerberus-Retired) (aka MaiNoKen/Steven)
-- Thank you for the fun times in Vana'diel

Art for the sake of art itself is an idle sentence.
Art for the sake of truth, for the sake of what is
beautiful and good — that is the creed I seek.
- George Sand

A designer knows he has achieved perfection,
not when there is nothing left to add,
but when there is nothing left to take away.
- Antoine de Saint-Exupéry
#278 May 22 2007 at 7:14 AM Rating: Decent
Quote:
I'll remember your retarded logic the next time someone leaves their leased Jag running in the ghetto and someone steals it, then they cry to the insurance company about it.


The problem with this is, he didn't leave it running: he parked it in front of their house and gave them the keys, title, and insurance.

When are we as people going to take responsibility for our actions? Why do people insist that cheating is only cheating if you get caught? Why is SE the only one expected to take the moral high ground here?

I'm really sorry the OP f'd up, it sucks his toon is gone, but essentially he gave it away. If he was so excited to DL files related to cheating tho, how much of that wonderful gear did he get fair and square? But after all, ~everyone~ bots at HNMs, so no harm done amirite?
#279 May 22 2007 at 7:19 AM Rating: Default
Scholar
****
6,631 posts
Quote:
If he was so excited to DL files related to cheating tho, how much of that wonderful gear did he get fair and square? But after all, ~everyone~ bots at HNMs, so no harm done amirite?


HNM LS is over-rated and the biggest way to waste time to deal with internet drama for a few pixels that you do not even own.

I think I am pretty strong player without being in a HNM LS, and I am happy with it :3 I enjoy playing with integrity and without being binded to tell what to do all the time.
____________________________
Amanada (Cerberus-Retired) (aka MaiNoKen/Steven)
-- Thank you for the fun times in Vana'diel

Art for the sake of art itself is an idle sentence.
Art for the sake of truth, for the sake of what is
beautiful and good — that is the creed I seek.
- George Sand

A designer knows he has achieved perfection,
not when there is nothing left to add,
but when there is nothing left to take away.
- Antoine de Saint-Exupéry
#280REDACTED, Posted: May 22 2007 at 7:37 AM, Rating: Sub-Default, (Expand Post) For one thing, I really do not care if I look stupid. I'm voicing my opinion on this matter just as you are. Counter arguements or not, I've posed a number of questions to those of you who think SE is not doing their part, regarding what changes you seem to think they should make. Haven't really heard any good answers/solutions yet. Again you all seem to think you know what they should do, so get it out in the open. List your suggestions here. Once I hear a good one that I can't debunk, I'll give you props. So far none of the solutions I've heard are practical. I'm a very logical person, so if you can give me a logical solution, or even a logical reason why SE fails, I'll own up to it. I may be a dick, but I admit when I'm wrong.
#281 May 22 2007 at 8:35 AM Rating: Decent
***
1,606 posts
I think SE should add some kinds of extra security to changing CC info. If not for situations like this, than for those people who sell their accounts on IGE (not IGN).

I know I wouldn't want to give out personal information to a website so they could give my information to some fool buying an account to change the CC number.

I know people think that having questions would be silly since a key logger would just record your answers to the questions anyhow but that would mean that the key logger would probably have to be on your system for a very, very, very long time. By that time they have already gotten any other account info you have entered on that computer i.e. bank, credit card, ebay, email passwords etc. So FFXI would be the least of your worries.

Still sucks that the account was jacked, whether he/she should have known better or not.. It still sucks.

Edited, May 22nd 2007 12:45pm by MrTalos
#282 May 22 2007 at 9:23 AM Rating: Default
***
3,261 posts
MrTalos wrote:
I think SE should add some kinds of extra security to changing CC info. If not for situations like this, than for those people who sell their accounts on IGE (not IGN).

I know I wouldn't want to give out personal information to a website so they could give my information to some fool buying an account to change the CC number.

I know people think that having questions would be silly since a key logger would just record your answers to the questions anyhow but that would mean that the key logger would probably have to be on your system for a very, very, very long time. By that time they have already gotten any other account info you have entered on that computer i.e. bank, credit card, ebay, email passwords etc. So FFXI would be the least of your worries.

Still sucks that the account was jacked, whether he/she should have known better or not.. It still sucks.

Edited, May 22nd 2007 12:45pm by MrTalos


Yes, but read above. This was already brought up by DancerRonin. That would only prevent the persion from deleting your character and changing your CC information. It would not prevent the thief from logging in as you, and selling off all your inventory. He would not be able to take control of the account, but he would still be able to do just as much damage, because he could still obtain all basic login information.
#283 May 22 2007 at 12:10 PM Rating: Default
Hiro incase you havent noticed your stuff was sold, 4 items.

Anyway i believe that after this the GSs have gone way too far with these types of actions (if it was the GSs at all) I think that SE should take some action now that they seem to be a real problem to the players instead of just making the game harder for players. If SE really is a good company they will do more than just give a warning, this kind of action shouldn't be avoided by SE, this is a real threat to players.
#284 May 22 2007 at 1:01 PM Rating: Decent
detected: Trojan program Trojan-Spy.Win32.Perfloger.ab File: C:\Hax\mrwildrabbitradar.zip/MrWildRabbitRadar.exe//RapSFX/rinst.exe


Antivirus Version Update Result
AhnLab-V3 2007.5.21.1 05.22.2007 no virus found
AntiVir 7.4.0.27 05.22.2007 DR/Perflogger.CA.33
Authentium 4.93.8 05.21.2007 no virus found
Avast 4.7.997.0 05.22.2007 Win32:Trojano-1134
AVG 7.5.0.467 05.22.2007 PSW.Banker.25.S
BitDefender 7.2 05.22.2007 no virus found
CAT-QuickHeal 9.00 05.22.2007 no virus found
ClamAV devel-20070416 05.22.2007 no virus found
DrWeb 4.33 05.22.2007 Trojan.DownLoader.8132
eSafe 7.0.15.0 05.21.2007 Win32.Perfloger.i
eTrust-Vet 30.7.3652 05.22.2007 no virus found
Ewido 4.0 05.22.2007 no virus found
FileAdvisor 1 05.22.2007 no virus found
Fortinet 2.85.0.0 05.22.2007 Keylog/Perflogger
F-Prot 4.3.2.48 05.22.2007 no virus found
F-Secure 6.70.13030.0 05.22.2007 Trojan-Spy.Win32.Perfloger.ab
Ikarus T3.1.1.8 05.22.2007 Trojan-Spy.Win32.Perfloger.I
Kaspersky 4.0.2.24 05.22.2007 not-a-virus:Monitor.Win32.Perflogger.ca
McAfee 5036 05.22.2007 no virus found
Microsoft 1.2503 05.22.2007 TrojanDownloader:Win32/Agent.B
NOD32v2 2285 05.22.2007 Win32/Spy.PerfKey.S
Norman 5.80.02 05.22.2007 W32/Banker.BMNT
Panda 9.0.0.4 05.22.2007 no virus found
Prevx1 V2 05.22.2007 no virus found
Sophos 4.17.0 05.21.2007 Perfect Keylogger
Sunbelt 2.2.907.0 05.17.2007 no virus found
Symantec 10 05.22.2007 no virus found
TheHacker 6.1.6.120 05.21.2007 no virus found
VBA32 3.12.0 05.21.2007 Trojan-Spy.Win32.Perfloger.ab
VirusBuster 4.3.23:9 05.22.2007 no virus found
Webwasher-Gateway 6.0.1 05.22.2007 Trojan.Perflogger.CA.33

Do people seriously download stuff and not scan it with an anti virus software?
It is pretty much unexcuseable this day and age. if you do not have an anti virus get one. There are maney good free anti virus softwares.

Also use a firewall. I use process guard and spy bot tea timer and ghost security suite. with those programs im fairly confident in my secuirty. Ghost app and ghost reg will block apps and the registry
#285 May 22 2007 at 1:04 PM Rating: Good
29 posts
Called again Friday, Monday, and again today on Tuesday after this announcement:

http://www.playonline.com/ff11us/polnews/news10410.shtml

Specifically this sentence gave me a small simmer of hope:

If you are unable to log-in with your PlayOnline account/password, or notice a change in your gil or items, please do not hesitate to contact us.

Unfortunately this was apparently a false statement, as POL support gave me the same run-around. I specifically mentioned the news update, and even gave them URL information to see it themselves, but they wouldn't let the "You have to have the current CC info" argument go, so I'm still out of luck.

I proceeded to lecture them a bit on security, and make sure they put everything I said into the notes tethered to my account, but its doubtful anything will happen. Bleh~

I'll keep everyone updated if anything happens, but let's be realistic...the odds of SE doing ANYTHING are slim. They've been known for their horrible customer support, and their security. They've had low rating amongst business bureau's since POL launch, and that hasn't changed in its 5 years of life.

Also, reading every post on this thread, I agree that this could have been avoided upon further thinking before reacting. However many people compare this to me openly giving my account to another person. Let me just say, that no matter how you look at this, its more similar to a scam. It was lack of information on my part that I could be so easily compromised, and I simply didn't know that so little could result in such massive damage done.

Another note about the mentality of "own up to your mistakes" and "suck it up, try again". I completely understand this way of thinking, and if it was just a "Regular Mistake", I'd completely agree. However when this is a mistake, that can be COMPLETELY reversable by another factor (SE), I believe anyone can point a fair share of the blame to them for not doing so.

Example: If you ran down stairs carrying a lamp and drop it, its broken, you can't fix it. It's your fault and you learn not to run down stairs carrying a lamp. Plain and simple you own up to your mistake, apologize, w/e, don't do it again.

Probably a bad example, but the point of this is no matter what you do, the lamp can't be fixed/repaired. Where as in an account situation, ya I "dropped" it, someone else took it and used it, but SE can fully repair it. I learned my lesson, and I realized I could be compromised a lot easier than I previously believed. SE refuses to help though, and that puts me in a very irate position.

Final note: Someone mentioned something of the nature "He's a leader of an HNM shell, we are better off without him", or something of the nature. Few notes for the one who spoke based off generalizations:

-HNM? Yes ~ Kings? No
-Bots? No
-What did we do then? Sea/Sky/Lessers/KSNM/ect
-Led a Dynamis LS~ Being forced to "leave" as I did puts many of its members in a very tough situation.
-Led a Salvage LS~ Of which I'm positive is now void

I appreciate input and flames, but such a statement as that really annoyed me. Not everyone in this game bots for claims, and hunts kings as if they were the Holy Grail. HNM does not = bot Kings.
#286 May 22 2007 at 1:06 PM Rating: Default
omfg lol!!!!!!!!!!!
#287 May 22 2007 at 1:18 PM Rating: Good
****
4,400 posts
Quote:
When are we as people going to take responsibility for our actions? Why do people insist that cheating is only cheating if you get caught? Why is SE the only one expected to take the moral high ground here?


Yes, because the OP was obviously cheating. You seem to forget that a crime in the real world was committed against the OP, and others as well. Computer hacking is a crime, in the real world. Ya know...where you live and breathe and (hopefully) have a job. You people seem to be forgetting that.


#288 May 22 2007 at 1:18 PM Rating: Default
Scholar
****
6,631 posts
Quote:
I appreciate input and flames, but such a statement as that really annoyed me. Not everyone in this game bots for claims, and hunts kings as if they were the Holy Grail. HNM does not = bot Kings.


1) In Cerberus, the highest tier LSs are always drama laid (either between LSs or within LS). A significant amount of members of such LS engage in botting and RMT (even may only be minority), there are enough of them, and players will set aside conduct for the sake of pixels they do not own.

2) HNM = the most over-rated and time consuming thing ever. HNM can be fun, but if it become a grinning that bad drama, cheating and accusation of cheating is "accepted part" of it, something is wrong.

3) I don't play FFXI is to sit around to hope to get an item, and have to hear people insulting each others.

Edited, May 22nd 2007 5:19pm by scchan
____________________________
Amanada (Cerberus-Retired) (aka MaiNoKen/Steven)
-- Thank you for the fun times in Vana'diel

Art for the sake of art itself is an idle sentence.
Art for the sake of truth, for the sake of what is
beautiful and good — that is the creed I seek.
- George Sand

A designer knows he has achieved perfection,
not when there is nothing left to add,
but when there is nothing left to take away.
- Antoine de Saint-Exupéry
#289 May 22 2007 at 3:00 PM Rating: Default
Hiroleonheart wrote:
Never opened the program, only unzipped the file. As I said, I figured it was some pictures, maybe a video, something funny/stupid w/e. When I saw it was a program, I deleted it immediately. As far as I know from forums and all information previously stated, Keyloggers shouldn't be able to attack you unless you run the program or use windower (Most take both that I know of). I did neither, and was still compromised.



Keyloggers can be set up to be smart bastards.

Unzip, or in any way let one get on your PC, and it knows where to put itself, and you will never know it was installed.
#290 May 22 2007 at 3:07 PM Rating: Excellent
Dankdreamz wrote:
detected: Trojan program Trojan-Spy.Win32.Perfloger.ab File: C:\Hax\mrwildrabbitradar.zip/MrWildRabbitRadar.exe//RapSFX/rinst.exe


Antivirus Version Update Result
AhnLab-V3 2007.5.21.1 05.22.2007 no virus found

. . .

Do people seriously download stuff and not scan it with an anti virus software?
It is pretty much unexcuseable this day and age. if you do not have an anti virus get one. There are maney good free anti virus softwares.

Also use a firewall. I use process guard and spy bot tea timer and ghost security suite. with those programs im fairly confident in my secuirty. Ghost app and ghost reg will block apps and the registry


Perhaps you haven't noticed, but about half of the AV scanners you listed didn't find the trojan.

All those false negatives should be a cause for alarm.
#291 May 22 2007 at 3:27 PM Rating: Good
**
477 posts
Dang this sucks, looks like he is starting to unload the items.

http://www.ffxiah.com/player.php?id=352002&sid=4

Looks like Pcharm, Scorp Harness +1, Evasion Torque, and Flame Ring so far

I hope this gets worked out for you man.
#292 May 22 2007 at 4:10 PM Rating: Decent
*
120 posts
This will sound stupid, but what if they did a security question upon every login, or for when you wanted to change your billing information? Not sure if it's already been mentioned in the threads, but that's just my thought. I mean I have to do it all the time with my credit cards online, so I'm wondering, out of curiosity, why it wouldn't be the same for our POL account. . .

I know many here are not stupid enough to open some file that some dumbass sent over a /tell (since the majority of people whom have posted on these threads have discussed the risks involved with such acts); but, this is getting riddiculous. . .reminds me when you first preached abstinence to reduce the risk of contracting an STD or avoiding unplanned pregnancies; but thanks to the media's influence on the young culture, you preach using protection at all times instead. . . it just seems like now you have to implement security measure upon security measure because some people don't get the hint. But it really is unfortunate for that small number of people who fall victim to this kind of "identity theft."



#293 May 22 2007 at 4:20 PM Rating: Good
Roselynn wrote:
This will sound stupid, but what if they did a security question upon every login, or for when you wanted to change your billing information? Not sure if it's already been mentioned in the threads, but that's just my thought. I mean I have to do it all the time with my credit cards online, so I'm wondering, out of curiosity, why it wouldn't be the same for our POL account. . .


This seems like the best possible solution: using billing information as a back-up over-the-phone identification method, and requiring a separate form of authentication/identification (registration key, or security questions) to change billing information. Shouldn't be too hard to implement.

(Requiring it at every login would be self-defeating, since key-logging software would obviously catch it. The idea is that the information would only be required at the billing menu.)
#294 May 22 2007 at 5:14 PM Rating: Good
*
120 posts
Pachichachi wrote:
This seems like the best possible solution: using billing information as a back-up over-the-phone identification method, and requiring a separate form of authentication/identification (registration key, or security questions) to change billing information. Shouldn't be too hard to implement.

(Requiring it at every login would be self-defeating, since key-logging software would obviously catch it. The idea is that the information would only be required at the billing menu.)


I just don't understand why SE wouldn't though. . you know? I'm trusting some company by giving them my credit card info, and while I will try and uphold my end of the agreement to take responsibility and not use/download 3rd party software that will jeaopardize my account, I would like the favor in return. . I would like them to take some responsibility by implementing a few--god forbid--minor security measures that will protect my account to some degree. .I mean it's just a case of reliability: both parties (the company and the customer) are responsible; I rely on the company to safeguard the information I give them to the best degree possible, and they will have to rely on me to take measures against having that information stolen. . it just seems (sadly) that SE is not doing a lot on their end to safeguard my information, is all. . .

I mean, you have to admit, hackers are getting very savvy and there are too many gullible people in the world. It's not as simple as it used to be.
#295 May 22 2007 at 5:17 PM Rating: Decent
Well thats why I use kaspersky. They are IMHO the best AV on the market.

If you knowingly download stuff off the web and don't scan it before opening it...
#296 May 22 2007 at 6:47 PM Rating: Default
Quote:
GM[Dave] ridiculed people who accidentally throw their Bomb Cores, saying it was their fault they were stupid. Reading his essay, I thought "This man is going to be very bitter if he ever tosses his Bomb Core." This thread reminds me of that.


Hmm? You DO know that [GM]Dave isn't real, right? He isn't a GM, the guy just plays FFXI. It just sounds like you did not know that.
#297 May 23 2007 at 1:35 AM Rating: Good
*
85 posts
Hiroleonheart,

I hope when you are calling, that you are requesting to speak to a supervisor and just not keep talking to whomever you happen to get. Keep asking for a persons supervisor if he/she is unwilling to speak to you. If that doesn't work, you need to start contacting other people in SE's foodchain.. like the North American vice-presidents.

Announced on April 17th.

John Yamamoto assuming North American CEO responsibilities from Square Enix top dog Yoichi Wada. Ask to get transfered to his office.

Also:

The Better Business Bureau rates SE as an F. From their page, got contacts.

# Lyman Tuttle
Accounts Manager
Email: support@square-enix-usa.com
# Gene Messerschmitt
BSG Associate
Email: gmesserschmitt@square-enix-usa.com

I could not find any other NA contact info, they don't trade on the NYSE or NASDAQ. They trade on the Pink Sheets and can't find much more than a stock price.

I hope this information can help you in some way. These guys don't say much about their corporate struction except in Japan. Nothing on who runs the NA operation in their annual report.

#298 May 23 2007 at 4:58 AM Rating: Good
Call your bank and work with them towards the police. Identity theft is against the law. And the way SE refuses to help you adds to this.
#299 May 23 2007 at 5:21 AM Rating: Default
***
1,543 posts
Let's just look at this as proof positive that no matter how good you are at FFXI, you can still be a moron.

You downloaded something you believed was a cheat program. After S-E repeatedly warns you NOT to download third party programs. After getting a link from an anonymous source who blindly /telled you with the link.

Unfortunately for you, it proceeded to hack your account. Now the new owner of your account is cleaning it out.

You are an idiot, sir.

For those people saying "It's good customer service to help":

You're a CS rep. You have a customer who deliberately violated the terms of their user agreement and wants you to "fix the problem". They have attempted a banning offense (downloading a cheat program). Do you restore their access?

Would it be nice? Yes. Would it also be bad business? Yes.

Incidentally, S-E has a "D" rating with the BBB. Not an "F".

They have responded to BBB requests for mediation in the past, as follows:

2 Making a full refund, as the consumer requested
0 Making a partial refund
101 Agreeing to perform according to their contract
4 Refusing to make an adjustment
38 Refuse to adjust, relying on terms of agreement
0 Unanswered
10 Unassigned
155 Total

"Our complaint history for this company shows the company gave proper consideration to complaints presented by the Bureau." - BBB website.

So if you do have an issue, feel free to ask the BBB folks to mediate for you. S-E does respond.





Edited, May 23rd 2007 9:23am by Morgrist
#300REDACTED, Posted: May 23 2007 at 6:07 AM, Rating: Sub-Default, (Expand Post) There is only one thing that can sum up this thread for the op, and that is....
#301 May 23 2007 at 9:50 AM Rating: Good
*
119 posts
I'm lad I wasn't on when it happened. My bf told me about it though. I'm on Ramuh also and I don't think I've met, but you do sound familiar. My bf told me about what happened to you though. He told me you were a real nice person and didn't deserve it, so apparently he knows you. But he was angry about it, then again he did have his account stolen a while back and only got it back when someone logged onto it and gave it back.

I don't have time to read the whole thread, at work, but if it wasn't solved I hope you get it back and wish you luck. Don't beat yourself up, everyone does something stupid at some points. I do all the time. Again...Good Lcuk.
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 65 All times are in CST
Anonymous Guests (65)