My poor fiance has had nothing but trouble with WoW since the patch came out. First his game couldn’t be verified after he downloaded the patch and nothing worked (including reformatting both hard drives) until he created a new admin account on windows. Yeah, seriously. It was ridiculous.
Then, last week his account was hacked and his weapons on his 70s were vendored, as well as all his consumables and various other items. Most of his gold was taken, but it looks like they rounded to the nearest ten and left him with around 5-7g on each character. His anti-virus software had stopped functioning, apparently (this may have had something to do with reformatting the hard drive and connecting to the internet before reinstalling the anti-virus software). We uninstalled it (btw, uninstalling Symantec Antivirus manually is extremely time-consuming and tedious.), for some reason remove program didn’t function properly either. In any case, I gave him my shiny Norton 360 and all seemed to be well. The first anti-virus scan we ran seemed to go well, got some stuff out that looked bad and whatnot. After we ran the scan, he changed his password. His preliminary restore gave him all his stuff back, just not his gold. No big deal, gold is not that hard to come by; especially since the new dailies came out. Everything seemed to be going hunky-dory.
I come home today and ask if he got his last Steamvaults run in today (he only has one more before exalted with Cenarion Expedition and can get his Earthwarden). He tells me that he got an e-mail saying that his password was changed. He had not changed his password today. He e-mailed Blizzard about it, saying that this was not an action he had taken. I did a bit of investigating myself, and realized that he can reset his password himself since he created a security question when the account was created. While he’s doing that, I check his armory profiles to see what kind of damage has been done this time and I check our guild bank to make sure it didn’t get ninja’d. His second 70, the druid tank, is naked; wearing only the Argent Dawn trinket. His first 70, the troll hunter, is missing a ring and both trinkets and weapons again. Our guild bank had a bunch of food crap taken out of it, but nothing of much substantial value. We had another officer demote his characters for the time being. When he got back in, he found that this time they left less than a gold on each character and sold all of his bank bags. The GMs have been great with their responses and pretty quick with restoring things. It still really stinks though. So today during dinner I installed Spybot and Ad-Aware on both of our computers and scanned them. Looks like we got the keylogger this time. After both those scans, he changed his password again. Hopefully we’ll not have any more WoW problems for a long, long time.
This time though, there was mail in his mailbox (probably COD) from a character that was clearly in some way related to the hacker.
In conclusion: scan often, change your password often, but change it after scans.
Midterms are next week, so I really don’t have any time for WoW research and dissemination of information. More of that during/after Spring Break (which is naturally later than everyone else’s).