Hello

I tried to log into my bnet account yesterday and it now requires an authenticator to get in. I believe my account has been compromised/hacked.

I ran spyware and antivirus already on my computer. What can i do next to get my account back?

---

Q u o t e:
Originally posted by Martyt [Blizzard Poster]

Before you log in:

Make sure the system is secure, you can use these programs to do so:

When you run the scans, have the World of Warcraft launcher started and type random letters into the account name, password, and authenticator fields if applicable, without hitting the Login button, just leave the program running like that while you scan.

Malwarebytes to scan the computer:

http://www.malwarebytes.org/

ComboFix also removes malware and spyware (not for 64 bit OS or Win7):

ComboFix guide/tutorial:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

ComboFix download:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

A-Squared download:
http://www.emsisoft.com/en/

If nothing is found with these programs, it does NOT mean your system is clean. It just means these programs may not be able to detect what you may be infected with.

Once the system is secure change the password for the Battle.net account and the password for the email account registered to the Battle.net account

An email has been sent your way with additional information.

If after regaining control of the account and characters, you find any items are missing, please submit a GM ticket so they can do any possible restorations for you.

We suggest you put your own Authenticator on the account as soon as possible to prevent further occurrences.

Here is link where you can get more information about an authenticator:

http://us.blizzard.com/store/search.xml?q=auth

Here's a link with more information about account security:

http://us.battle.net/security/

---

Hey thanks for the answer. I already scanned my computer without finding much.

My problem still remains, I can't access my game page because it's asking me for an authenticator code.

Mhmm, you have to wait for Marty to come around.

http://us.battle.net/security/help.html

Make sure you're following the outline described above, as those are the best to assist blizzard to assist you. Until then, waiting for Marty will be best.

Thanks!

I guess I'll wait for Marty. I just hope I don't miss the sc2 beta phase 2 ^^

Phase 2 was slated for "early July", so you've gogt plenty of time in Blizzard Time.

Hay Herrmuller, I'll ask you the same question I asked about the Authenticator problem over on this thread http://forums.battle.net/thread.html?topicId=25626286139&sid=3000

Do you have SC2 Beta (from your comments it looks like you do) and were you trying to log in to the beta while it is down??

I have a suspicion that the Worm / Trojan that is steeling peoples accounts and adding the Authenticator to there accounts is some how hooking on to the SC2 Beta .exe and capturing the password from that. It is the only place I had typed in my password since beta has been down, and my account was stolen only a few days after I tried to login.

A good idea here is to use another password for unescure things, have a safe-word for security required stuff like mails, moneybased users such as a battle.net account. And have other random passwords for random stuff.

Hey Rod i agree with your theory cause i am a nut about where and how i type in my pass word and the only i can think of it getting stolen was with sc2 beta cause i know my firewall and program said it does mimic a worm/ trogan cause i just had the same thing happen to my lucky for me my wow account ran out of time so no really harm was done but now that i think about it i did try too log into sc2 in the last little while so that theroy is a vaild one at this point. but also there was a problem in the past about people while testing where it would ask for a auth code even when people didnt have one that includes my self so with there last update to wow too add in the real ld some bug may have added a auth gen to peoples accounts where it thought there was one. but thats just a total shot and the dark and basis or facts to back it up at this point. just my thoughts at the moment

Hello Rod,

I do have Sc2 beta on my account but I did not try to log in since phase 1 ended. You must find another theory hehehe.

I checked if the game was up on July 1st, which is after i got hacked, but I could not reach the pannel where you put in your info. When i open the game i receive a message saying i don't have the latest version or something like that.