Please help Save. There are no in-game GM's to help us. My clan leader, SlyCutter, was hacked and now we are losing our items in the Warehouse and Cly has lost everything of his own. :mad:
Just to add from what I have seen when clannies got hacked:
Posting on the forums is USELESS. Totally. Best you will get is Sace answering and telling you to send a support ticket.
Send a support ticket. They WILL help - eventually. When a friend of mine got hacked, the guy selling his stuff was sitting in Giran for another two days after we sent the ticket (was kinda easy to see, since he was selling the +16 duals and the armor my friend had). A few days later, he got his account back (empty). It then took another two weeks to get all the stuff back - but from what I heard, he really DID get everything back, even the augmentations.
Well now this explains why sly was not answering his pm's about Codj botting outside Goddard on the antelope/bandersnatch
oh, really botting? how this could be possible :D
seeing how many WO members have been hacked in the last few Months you might want to double check if your clan forum hasn't been hacked as that might be how the hackers found some of the needed data to access the accounts in question ?
This is rhetorical I imagine lol. Yea I tried to kill him via buffing the mobs + healing but as everyone well knows prophets are terrible healers and I could not keep up with his dd ability despite all my mob buffing ><. Though that antelope was a beast!
sorry to hear that about WO. they were good people. the only thing i can think of is a Facebook data harvester that may have been used to steal account info by submitting a hacking ticket, getting the password reset by NC, and then finally stealing the account.
gotta watch out for them crazy "ZOMG THIS GUY HAD A OVERREACTION TO HIS GF AND KILLED HER KLIK LIKE FOR LINKZ"
It was a backdoor trojan virus created after 11/01/10. It self extracts itself then deletes the original file so you cannot trace by install date.
I will be filing criminal charges if NCsoft can tell me the person who access my computer was from the US because my police department stated if the IP address did not originate in the US it is worthless to file a report cause their is no extradition laws for many countries for this.
The hacker must of got my information when ironically I had to log into plaync to download the forms for my receipt of the clan hall.
My biggest concern is the failure of plaync security. I got no emails stating my passwords were being changed and the IP address that was changing them. When I gain control over my account again the email address was not changed. I see this as a huge failure for my sensitive information that has now been exposed and plaync security measures failed.
Your password hint questions should not be able to be changed unless you know the answers to the original ones also. The hacker was allowed to change them without a check on the old answers. I am sorry but I didn't suddenly become born in another city overnight lol
Guess now Ill send my ticket to HGM Will and hope to get my stuff back :(
BTW The Trojan came from L2blah. IMO Stay off the site its probably why must people get hacked in L2.
They must of gotten banned in the middle of stripping my accounts they got most of my weapons Armour and jewels but some mats augmented jewels and pets are still there. So it looks like account security locked the accounts down fairly quickly, hopefully they did the same to the people who accessed my accounts too.
actually I did, it was in my browser temp files from the site.
So keep thinking that go to that site at your risk. You think blah scans all the vids people post? It is fairly simple to slip a trojan in a movie file.
actually I did, it was in my browser temp files from the site.
So keep thinking that go to that site at your risk. You think blah scans all the vids people post? It is fairly simple to slip a trojan in a movie file.
So you got it from a file you downloaded, not from l2blah itself, stop spreading ********.
Thanks for the warning. For quite some time now, blah has not got any useful information anyway, only ****** posts, so guess time to finally remove the bookmark.
The site isnt safe embedded videos do not need to be downloaded, do know anything about computers? If you click on play on an embedded video you are not downloading anything but it can allow a trojan to access you computer.
Its the fact L2 blah has ads all over the place and makes no person safe because it does not scan embedded files is beyond stupid but yea keep using go ahead I posted the warning.
Stop arguing and insulting each other over where the problem originated from. Every person is responsible for their own computer's security. If you suspect that it is from a particular website, then it is fair to warn other people that that might a possibility, and other people can heed that warning or not.
Of course you can catch a trojan just by visiting a site. It can happen at any time. If you visit l2 specific sites like l2blah I suggest you use firefox with noscript plugin enabled. It will protect you from javascript injected trojans.
Slycutter, with what did you detect the trojan? Everyone else that have visited the same site recently might want know.
It was a virus created after Nov 1st, so if your virus definitions are before that date you need to update.
Windows defender caught it with a full scan after I update the definitions.
The trojans are called the following:
Trojandownloader:Win32/Renos.ML That is the file that downloads the trojan it installed as this file name : C:\windows\temp\wer5bc6.tmp
The trojan itself was called:
Trojan:Win32/Alureon.DA it installed as a file name of : C:\users\owner\appdata\local\temp\tmp97bd.tmp
It changed the creation date of the files to 3/12/10 so you might want to search by date. The trojan seems to lay dormant till you access the plaync site. I would check for these files/trojans before you access the plaync site if you have used L2 blah since Nov. 1st. I cannot tell which exact post it was on blah or I would notify their mods just the files came through my temp folder right after I loaded a page from L2blah.
It was a backdoor trojan virus created after 11/01/10. It self extracts itself then deletes the original file so you cannot trace by install date.
I will be filing criminal charges if NCsoft can tell me the person who access my computer was from the US because my police department stated if the IP address did not originate in the US it is worthless to file a report cause their is no extradition laws for many countries for this.
The hacker must of got my information when ironically I had to log into plaync to download the forms for my receipt of the clan hall.
My biggest concern is the failure of plaync security. I got no emails stating my passwords were being changed and the IP address that was changing them. When I gain control over my account again the email address was not changed. I see this as a huge failure for my sensitive information that has now been exposed and plaync security measures failed.
Your password hint questions should not be able to be changed unless you know the answers to the original ones also. The hacker was allowed to change them without a check on the old answers. I am sorry but I didn't suddenly become born in another city overnight lol
Guess now Ill send my ticket to HGM Will and hope to get my stuff back :(
BTW The Trojan came from L2blah. IMO Stay off the site its probably why must people get hacked in L2.
You might want to check on access to your email. They may have been getting into that as well.
I checked I was logged into my email account when they were changed they would had to log me out to delete the emails so they didnt get my email account info.
There is a flaw in PlayNC this is kind of the MO for being hacked you do not even get a warning your password is being changed.
I checked I was logged into my email account when they were changed they would had to log me out to delete the emails so they didnt get my email account info.
There is a flaw in PlayNC this is kind of the MO for being hacked you do not even get a warning your password is being changed.
Stop arguing and insulting each other over where the problem originated from. Every person is responsible for their own computer's security. If you suspect that it is from a particular website, then it is fair to warn other people that that might a possibility, and other people can heed that warning or not.
Julie is an administrator on Blah, she is simply defending her website's reputation. Slycutter's accusations are baseless and completely unwarranted, especially since he brought up the example of blah not moderating what video links are being posted there. If he chose to click a link posted on blah, and download a file that may have contained a virus it is his own fault.
Blah does not contain or distribute viruses/trojans.
Btw, who doesn't have real time scanning on their downloads these days? This isn't 1995, get better AV software.
I didn't download anything. And sites like youtube scan all files for viruses. Its there weird hosting sites people put videos up don't and if thats the case and Julie does not care about the security of their users then they should stop allowing the embedding of any files. Before you can embedded a video on my forums it has to be virus scanned if a virus is detected then it won't allow it to be posted and flags the person's account to the admin (ME).
Your happy with shotty security keep using the site I am just putting the warning out there. I DID NOT DOWNLOAD ANYTHING so it wasn't scanned. So stop assuming things if read half my posts you would know how it got there.
It was a virus created after Nov 1st according the my virus software and it just updated to catch it yesterday but unless you do a full scan everyday if it downloaded before it was recognized as virus then you wouldn't of found it. It is not productive to full scan your computer several times a day since it takes 1 - 2 hours each time and lowers your memory to use in a very memory intensive game.
You have any idea how viruses work? if not stop playing armchair computer tech, some of us have gone to school to know exactly how things work. This is the first virus I has even gotten to my computer in 7 years I would say thats a very good track record better then most people.
Account security is just like having your house robbed. No matter how many percautions you take nothing is 100% and I am trying to tell people how to protect themselves from a similar thing in the future. If you want to go ahead and ignore me like Sace thats up to you, I am just telling you how the virus got to my computer via Blah. Julie as a adminstrator should be more concerned with what files on her site have the virus then claiming her site is 100% clean, if she cared about her users.
Game security is a serious issue. Not sure I've actually lost fellow clannies to hacking. One whose account was inactive was reactivated and then cleaned out. Another had toons cleaned out. He got back some common stuff to replace his OE'd good stuff.. on only 1 of several toons. Those toons are not being played now.
Congratz to those who have been able to get their gear back.
Noticed in a screen shot from Korean servers, they have a new security feature there. Many people play there in public Internet Cafes, L2 is a social event there on server and in Real Life. The chance of your account and password being stolen there though is high. NC now, for a small extra fee, texts messages your cell phone with a very temporary second code, if you subscribe. Not sure that feature would work well here. Not sure how many people have the cell phones to receive text messages. I don't.
What could help, in SlyCutter's case perhaps, and in the case of one of my clannies who got a keylogger on his comp, is some way that players could log to NC server and just lock down their account, until NC gets back to them with a code, emailed to their registered email address, to unlock it again. In the case of my clannie, he got in a fight with the keyloggers to access his account, then panicked and accessed his master account to change his password, thus giving them access to that as well. He was cleaned out, and has not been back since, except to tell me his tale.
NC, in some ways rightly, states that the security of our computers is our responsibility. That is true. But we could use some help, so that while we try to find and remove keylogging trojans, or locate a computer which is safe, so we can change our account passwords, our in game items are not being cleaned out.
It's not everyone who can afford multiple computers, or find space to put them, so they can play L2 on one (or like me two) and use a 2nd, 3rd or 4th just for risky internet browsing. Increasing security benefits players and NC. Players can be less worried about losing the stuff they need to play their characters. NC has happier customers and fewer petitions about being hacked. Also less demands for 24-7 hour GMs to be available to help.
Setting this up would cost, but it appears that NCKorea is already aware of the need for increased security there. They might be open to suggestions for changes which would benefit us as well.
I don't play typical free games. I'm concerned about how those games are making money. Some do it by advertising or selling special things in game. Some do it by giving you a free keylogger to steal your passwords. But for my monthly fee to NC, I do expect some help in keeping my game secure. I'll do my part as well.
Thanks.
Thanks too to SlyCutter for the information on how he was hacked, and the names used for the Trojan files. I have looked at L2Blah, since before EllieBelly disappeared completely, Blah was indicated as a possible successor site for information on upcoming changes to L2. So far, it's not even 10% of what EllieBelly was. WTB a pill that will teach me Korean :/
sly - buddy - theyre just getting you to rage post.
we know how these things work, and we take our security into our hands by merely plugging in, theres no point in diagramatically figuring out how the virus works or was distributed. what matters is you handled it.
I didn't download anything. And sites like youtube scan all files for viruses. Its there weird hosting sites people put videos up don't and if thats the case and Julie does not care about the security of their users then they should stop allowing the embedding of any files. Before you can embedded a video on my forums it has to be virus scanned if a virus is detected then it won't allow it to be posted and flags the person's account to the admin (ME).
Your happy with shotty security keep using the site I am just putting the warning out there. I DID NOT DOWNLOAD ANYTHING so it wasn't scanned. So stop assuming things if read half my posts you would know how it got there.
It was a virus created after Nov 1st according the my virus software and it just updated to catch it yesterday but unless you do a full scan everyday if it downloaded before it was recognized as virus then you wouldn't of found it. It is not productive to full scan your computer several times a day since it takes 1 - 2 hours each time and lowers your memory to use in a very memory intensive game.
You have any idea how viruses work? if not stop playing armchair computer tech, some of us have gone to school to know exactly how things work. This is the first virus I has even gotten to my computer in 7 years I would say thats a very good track record better then most people.
Account security is just like having your house robbed. No matter how many percautions you take nothing is 100% and I am trying to tell people how to protect themselves from a similar thing in the future. If you want to go ahead and ignore me like Sace thats up to you, I am just telling you how the virus got to my computer via Blah. Julie as a adminstrator should be more concerned with what files on her site have the virus then claiming her site is 100% clean, if she cared about her users.
There are no embedded videos on blah other than the ones being hosted on youtube. You clicked a link posted on blah that went to some website that had shotty security. Do not blame blah for you clicking a link to a website you don't know!
sly - buddy - theyre just getting you to rage post.
we know how these things work, and we take our security into our hands by merely plugging in, theres no point in diagramatically figuring out how the virus works or was distributed. what matters is you handled it.
now, can we move on ?
your right the are just trying to get a reaction the information has been posted to protect others its up to each person to take their own chances. I am very good with security and it upsets me knowing how careful I am not to click links and go to websites it still happened to me. I even use mozilla to block the holes IE.
if i may pull a quote out of context from the movie "the matrix"
"its like hacking a computer, all it takes is time."
and a quote from the bible (Ecclesiastes 9:11)
I returned, and saw under the sun, that the race [is] not to the swift, nor the battle to the strong, neither yet bread to the wise, nor yet riches to men of understanding, nor yet favour to men of skill; but time and chance happeneth to them all.
There are no embedded videos on blah other than the ones being hosted on youtube. You clicked a link posted on blah that went to some website that had shotty security. Do not blame blah for you clicking a link to a website you don't know!
It's not so much that the blah website itself is technically unsafe, the problem is simply that there is a higher percentage of people there who intentionally might post a link to a website which uses exploits to place some keylogger etc. on your computer (via posting a link to download some video, screenshot, some link in their signature, etc.). Of course people have to be careful when clicking a link, but I'd say it's fair to tell people to be ESPECIALLY careful on blah. Again, not because of the forum itself, but because of many of the people who go there. I myself already had avast popping up and warn me about some "trojan downloader" when I visited there.
Pretty amusing that some guy clicked on a link and blames blah for it because he doesnt understand enough about computers to realize what he did wrong.
No offense you have no clue about me or what your talking about. I am quite clear on what happened. I posted the info to warn others you want to keep your head buried in the sand and think your forum is ok thats fine. Others should of been warned they now enter at their own risk.
It is not like anything of use comes out blah anymore.
I have plenty of RL experience and education in computers and certificates to prove it to know exactly what happened but just keep thinking you know it all.
Most likely a story you cooked up because you were account sharing and your e-friend scammed you.
GF trying to blame blah to get your gear back.
I hear you are getting blasted on your own forums for what you said about ellie too. So I am no longer going to feed the troll you are and ignore you.
Actually you believe what ever you want, I know you cannot lie to the gms because they can see everything in their logs so why would I come with a trojan come up with the places the trojan was found and find a trojan virus that fits the proper description lol. Keep thinking nothing bad comes from your forums.... it almost pitiful there are still people out there like you.
You in the same category as people who think the world is still flat and sun revolves around the earth. lol
there is alot of spam on blah. some ppl will register and say wts nike shoes etc. w links in their text. Ive never clicked ne of those links. but did u want some nike shoes?
This is one of the more amusing threads I have read in a while, lol.
Out of Curiosity, SlyCutter do you/have you used a wireless network recently on a mobile device, or a laptop and or even your computer to access anything that would have a similar Username/Password to that of your L2 account, if not the L2 forums/website?
I was hacked back in august. I eventually got my account and my stuff back. I never posted on here what my suspicions were of how I got **** or where the trojan came from because I had no proof.
When I got hacked it was very simular to sly. I was logged in, got booted from the game, tried to log in but got the incorrect password message, tried to log into main account but the password was also changed. Tried to change password but questions, and answers were changed. I never recieved any emails from ncsoft about password changes. When I got my account back my email had not been changed.
The only thing in common with sites visited between me and sly was our own forums and L2guru. Knowone else from our forums have been hacked latley so I dought its from there but we really dont know. All I can say is that I still go to our forums and have had no issues since, but I will never go to the other site again.
I was hacked back in august. I eventually got my account and my stuff back. I never posted on here what my suspicions were of how I got **** or where the trojan came from because I had no proof.
When I got hacked it was very simular to sly. I was logged in, got booted from the game, tried to log in but got the incorrect password message, tried to log into main account but the password was also changed. Tried to change password but questions, and answers were changed. I never recieved any emails from ncsoft about password changes. When I got my account back my email had not been changed.
The only thing in common with sites visited between me and sly was our own forums and L2guru. Knowone else from our forums have been hacked latley so I dought its from there but we really dont know. All I can say is that I still go to our forums and have had no issues since, but I will never go to the other site again.
Youi know maybe NCSoft changed the email adress back to yours when the unlocked it for you? It would seem since the way they act about people reporting names of botters on these forums that would be what they do. This would explain why you didn't get an email on change of password because the email address was changed but NCSoft changed it back.
There is a flaw in PlayNC this is kind of the MO for being hacked you do not even get a warning your password is being changed.
Funny, every time I ever changed my pass NC sent me a e-mail right away, and what vid's do you see embedded on blah besides y-tube which you yourself already admitted are safe?
Been visiting blah forever without any prob's, and there are pages with link's that do have problem's, but any decent AV lets you know that anyway's, decent AV updates V definition's every 4 hour's, not every few day's as well.
well my acc expired....before i had info in mail like:
your acc name is expired bla bla bla...
few times already i not recived any mail about expire.
the same is when i activated acc, no info about acc is playable again like in old times.
also can cofirm i had no info when i changed pw on account..
so it means ncsoft not sending anything...??
im pretty sure my antivirus and outlook not blocked any mail from your company..so whats happnd?
well my acc expired....before i had info in mail like:
your acc name is expired bla bla bla...
few times already i not recived any mail about expire.
the same is when i activated acc, no info about acc is playable again like in old times.
also can cofirm i had no info when i changed pw on account..
so it means ncsoft not sending anything...??
im pretty sure my antivirus and outlook not blocked any mail from your company..so whats happnd?
Maybe,
1) You changed your e-mail since the date you made the acct. and didn't update your info ?
2) While you weren't playing marked it as spam or junk, and therefore would not receive it anymore, even though its sent?
I hear you are getting blasted on your own forums for what you said about ellie too. So I am no longer going to feed the troll you are and ignore you.
Youre the troll here, saying l2blah is unsafe and that its where you got your virus from. Not to mention youre wrong again about the fact that diego is getting blasted, its 2 ingame enemies that are flaming him, everyone else agrees with him.
Stop blaming other people/sites for your own stupid mistake. Nobody will get a trojan or virus from simply visiting l2blah.
Youre the troll here, saying l2blah is unsafe and that its where you got your virus from. Not to mention youre wrong again about the fact that diego is getting blasted, its 2 ingame enemies that are flaming him, everyone else agrees with him.
Stop blaming other people/sites for your own stupid mistake. Nobody will get a trojan or virus from simply visiting l2blah.
I hope you are correct, I have no proof it was blah. However I was hacked within hourse of logging into blah. I do blame myself for the **** because after it happened I realised my login/pwd for blaw wwas the same as my NcSoft main account login. That was my fault and quite dum of me. Doesn't mean I deserved to be hacked, but is my fault for making it easy for the hacker. Now no account I have has the same pwd.
Youi know maybe NCSoft changed the email adress back to yours when the unlocked it for you? It would seem since the way they act about people reporting names of botters on these forums that would be what they do. This would explain why you didn't get an email on change of password because the email address was changed but NCSoft changed it back.
just my 2 cents on this
I doubt they changed it back. Since getting the account back I have changed the password frequently and always get an email.
Well i will just aggre with Sly, in most parts, and underline one thing '
L2blah forums have nothing usefull to give to game community but trashtalking, trolling, and a place for everyone to place his ego.
Unsafe or not, still absolutly useless place to visit.
Sly, hope things go better for you and ur clan mate.
I will be filing criminal charges if NCsoft can tell me the person who access my computer was from the US because my police department stated if the IP address did not originate in the US it is worthless to file a report cause their is no extradition laws for many countries for this.
They might still be prosecuted in their home country. And if you don't file a report, NCsoft might not be able to disclose any information about that IP address at all, due to privacy reasons.
I too am in school for computer network security.. also my job in the army. BUT.. Julie, I dont believe Sly is attacking your forums. He is just simply stating that it came from your forum. Everyone knows security on any machine is not always 100% Updating your virus definitions helps yes but it does not always catch the new virus.. It could have simply been applied between updates. Something may have been embedded on your site and you may not know.. a link, video, or advertisement. Its happened to facebook and there are millions more ppl on there.. anywhere people populate online I think a hacker will try to take advantage of. Sometimes things slip through is all im saying. Sly has every right to warn people where it came from. Just as Sace said. You have every right to defend your forum, however, don't just rule out the possibilities stubbornly. :rolleyes:
Well i will just aggre with Sly, in most parts, and underline one thing '
L2blah forums have nothing usefull to give to game community but trashtalking, trolling, and a place for everyone to place his ego.
Unsafe or not, still absolutly useless place to visit.
Sly, hope things go better for you and ur clan mate.
It isn't useless if you are looking to trash talk, troll, and strut the size of your ego around. These are all very integral to what makes Lineage 2 one of the most amazing games I've ever played. Simply put, no other game has the politics the Lineage 2 does.
I too am in school for computer network security.. also my job in the army. BUT.. Julie, I dont believe Sly is attacking your forums. He is just simply stating that it came from your forum. Everyone knows security on any machine is not always 100% Updating your virus definitions helps yes but it does not always catch the new virus.. It could have simply been applied between updates. Something may have been embedded on your site and you may not know.. a link, video, or advertisement. Its happened to facebook and there are millions more ppl on there.. anywhere people populate online I think a hacker will try to take advantage of. Sometimes things slip through is all im saying. Sly has every right to warn people where it came from. Just as Sace said. You have every right to defend your forum, however, don't just rule out the possibilities stubbornly. :rolleyes:
Sly stated it came from the embedded vid's, or add's on the site, then later stated youtube vid's are safe because they scan their vid's. The embedded vid's on the site are youtube link's ( yaddayaddavidfromyoutubelinkhere ), add's are safe as well. The stuff that your AV will flag here and there on certain pages are link's people add.
It isn't useless if you are looking to trash talk, troll, and strut the size of your ego around. These are all very integral to what makes Lineage 2 one of the most amazing games I've ever played. Simply put, no other game has the politics the Lineage 2 does.
Blah has information section, update section, vid section's as well, but yes is mainly for trash talk. Freedom of speech!!!