Accounts Banned (09/25/2008)

[JigglyJam]

We would like to report the termination today of multiple accounts held by players involved in the usage of third-party tools or cheats, or engaged in RMT (Real Money Trading) activities.

Based on the results of our investigation, around 4640 PlayOnline accounts were terminated while around 340 accounts were temporarily suspended.
Additionally, we have increased the number of mass bannings against certain PlayOnline violations in order to prevent illegal acts.

Details of the violations are as follows:

- Usage of tools that allow enhanced character movement.
Week of August 24, Approx. 130 cases
Week of August 31, Approx. 290 cases
Week of September 7, Approx. 260 cases
Week of September 14, Approx. 270 cases
Week of September 21, Approx. 170 cases

- Usage of tools that circumvent game mechanics with respect to the timing of ability use, etc. in certain areas or at points where Notorious Monsters appear.
September 25, Approx. 20 cases

- Using cheats to automatically repeat a particular action.
Week of August 24, Approx. 20 cases
Week of August 31, Approx. 110 cases
Week of September 7, Approx. 180 cases
Week of September 14, Approx. 200 cases
Week of September 21, Approx. 220 cases

- Gil and item exchange for real world money.
Week of August 24, Approx. 10 cases
Week of August 31, Approx. 20 cases
Week of September 7, Approx. 30 cases
Week of September 14, Approx. 310 cases
Week of September 21m Approx. 220 cases

- Instances of areas or monster monopolization.
September 4, Approx. 130 cases
September 11, Approx. 100 cases

- Involved in compromised accounts
Week of August 31, Approx. 400 cases
Week of September 7, Approx. 690 cases
Week of September 14, Approx. 710 cases
Week of September 21, Approx. 490 cases

The termination of these accounts has led to the removal of approximately 1.8 billion gil from circulation.

We would like to remind players that as well as adversely affecting game balance, the use of third-party tools or cheats can also have consequences that are not immediately obvious, such as introducing damaging viruses, and comprising the security of private account details. Usage of third-party tools will not be tolerated within FINAL FANTASY XI, and we will continue to severely penalize any players found to be in violation of the PlayOnline Member Agreement.

As we continue to ensure a fun and balanced environment for FINAL FANTASY XI, we hope that our players enjoy the game as it was intended and take care to avoid involvement in activities that violate the PlayOnline Member Agreement.

Thank you for your continued cooperation and understanding.

http://www.playonline.com/ff11us/pol...ews14404.shtml

[JigglyJam]

Today's report will outline our actions conducted from August 27, 2008 to September 25, 2008 in dealing with players violating the user agreement, as well as details on the activities, results, and goals of the Special Task Force.

Click here for details on the Special Task Force's activities in dealing with players violating the FINAL FANTASY XI user agreement.

Warning Against Unauthorized Access
We have been warning PlayOnline users for some time about unauthorized access, but recently there have been reports of users whose PlayOnline accounts have been stolen and accessed as a result of going to third party sites introduced while viewing regular websites.
Because of this, immediately after a version update, damages caused by posting on and viewing normal websites may drastically increase. If you are connecting to PlayOnline with a PC, please be sure to strengthen your computer's safety through performing Windows Updates, using your internet browser's latest version, and by using internet security software. In addition to using the latest software versions, please refrain from visiting suspicious sites. Even if your PC is infected with a virus designed to steal PlayOnline IDs and passwords, by installing anti-virus software, you can significantly reduce the chance of your PC actually being accessed by an unauthorized third party. For information on preventative measures in dealing with unauthorized access, please view the "Information Regarding Unauthorized Access" page.

Click here for information on dealing with unauthorized access.

There have also been reports of link scripts to sites rigged with programs designed to steal PlayOnline IDs and passwords being embedded into user's homepages through unauthorized access. We ask that users possessing homepages review their site provider's information regarding unauthorized access and also confirm that no suspicious scripts or advertising banners have been embedded in their homepage.

Special Task Force Activities and Future Plans
More than ever before, the Special Task Force has strengthened its activities against violators of the user agreement such as hunters and users involved in illegal fishing. As a result, it has become very difficult for violators engaged in illegal gil collection for RMT to make money with their conventional methods, and many have decided to steal items or gil through unauthorized access.
Starting in July, the Special Task Force began banning accounts involved in unauthorized access in order to reduce the amount of unauthorized access being used as a method to make gil for RMT as much as possible.
http://www.playonline.com/pcd/topics...705/3705_6.jpg

http://www.playonline.com/pcd/topics...705/3705_7.jpg

In the following section, we will individually discuss each issue dealt with by the Special Task Force.
First of all, the use of synthesis and auction houses for RMT has been on the decline since May. Although there was a slight increase in the number of accounts banned in July, overall they have calmed down.
On the other hand, however, we have been receiving reports of stolen items obtained through unauthorized access being put up for sale at the auction houses. Also, through a Special Task Force investigation, it has been revealed that many of the violators engaged in the use of auction houses for RMT are involved in unauthorized access.
Because of this, since July, the Special Task Force has prioritized the banning of accounts involved in unauthorized access over all other issues. By focusing on dealing with accounts that have been accessed by unauthorized third parties, we believe we will be able to decrease the number of violators using auction houses for RMT.

Next, we move to the issue of hunters. Because hunters collect gil through battling Notorious Monsters and engaging in mining and lumbering, they require characters with relatively high levels. Up until recently, violators intending to engage in RMT would raise their characters to a certain level before beginning their activities. However, now, instead of buying new accounts with their own money and raising their characters from scratch, many are stealing accounts through unauthorized access and using those characters as hunters for RMT. As mentioned above, we plan on decreasing the damage caused by unauthorized access by swiftly dealing with the accounts involved. Likewise, we are continuing our investigations and bannings of hunters and believe that we can decrease their numbers further in the future.

Next, we move to the issue of illegal fishing. Through our strengthened activities in May, we were able to successfully and significantly decrease the number of violators. Because the number of characters banned for illegal fishing is decreasing, we can also assume that the number of violators returning to continue these actions is decreasing as well. Also, according to the results of a Special Task Force investigation, there are virtually no accounts that were commandeered through unauthorized access being used for illegal fishing, and it seems that illegal fishing has calmed down.
However, while the number of violators returning has decreased, we have confirmed some users engaged in illegal fishing who have escaped from the Special Task Force's bannings. We are solving this issue by having GMs strengthen their activities and deal with violators individually.

Matters of Concern Within the Community
In the following section, we will be explaining the Special Task Force's direction and plans in dealing with matters of concern within the community.

- I have no memory of logging in at the last login date/time displayed on the PlayOnline Viewer.
It is possible that your account has been accessed by an unauthorized third party. We recommend changing your password immediately. Next, verify your PC's safety by getting rid of any viruses or spyware that could be infecting your computer. Because it is possible that your PlayOnline password was stolen again by a virus or spyware while you were verifying your PC's safety, be sure to change your password again after you have confirmed that there are no longer any viruses or spyware.
Malicious third parties involved in unauthorized access do not necessarily change an account's password and steal its gil or items immediately, but oftentimes look over the account beforehand. If you realize that your account has been accessed early enough, you may be able to prevent any damages from occurring. Please regularly pay attention to the last time your account was logged into.
*The last login time is displayed on the lower right corner of the screen after logging into PlayOnline.

- While playing the game, "Disconnected. The current PlayOnline ID was used to log in from another terminal" was displayed and I was logged out. I logged in again, but the same message was displayed and now I can't log in.
If you don't have any idea who could have logged in to your account from another location, your account may have been accessed by an unauthorized third party. Please change your PlayOnline password immediately.
If your connection is cut before you can change your password, continue to keep logging into PlayOnline and contact the Information Center.
If you possess multiple PlayOnline IDs and it is outside of the Information Center's hours of operation, log in to PlayOnline with an ID that has not been accessed, log in to the game, and make a GM call. The GM (Game Master) will temporarily make the account that has been accessed unusable. If you cannot make a GM call because you do not possess multiple PlayOnline IDs, speak with a friend and ask your friend to make a GM call for you.
GMs, however, cannot change PlayOnline passwords. In order to do so, you will have to contact the Information Center at a later time.

- I was very thorough in the management of my PlayOnline password, but my account was still accessed by a third party. What should I do to prevent something like this from ever happening again?
The criminal methods used in unauthorized access change every day and, even with anti-virus software and internet security software installed, your account can still be accessed by a third party. As such, we cannot give you a surefire method to protect yourself from access in all cases.
However, by following the preventative measures outlined below, you can seriously reduce the chances of your account being accessed by a third party. Continuously being careful about unauthorized access is also very important.
In regards to the above question, even if you are thorough in the management of your password, your computer may be infected with a virus that can steal your PlayOnline ID and password. If you leave your PC as it is, you may again be accessed by an unauthorized third party using the same method. To prevent this, install anti-virus software to remove any such viruses. There are, however, some viruses that are not detected by anti-virus software, so it may be a good idea to consider re-installing your OS. Although re-installing your OS should get rid of any viruses, you will have to re-install all software that you had been using and perform version updates for many of them. This can be a very troublesome and burdening task. We ask that you personally make the decision on whether an OS re-install is necessary or not.
After you have gotten rid of all viruses, in order to heighten your computer's security, please perform periodic Windows Updates, virus checks, and make sure to keep your PC's security up to date. Also, continue to carefully manage your PlayOnline password.
Additionally, when using the internet, verify each URL that you access and be careful not to access any suspicious sites. Keep in mind that accessing URLs ending in ".exe" will automatically download a program to your computer. In such a case, because it is possible that a virus or spyware could be installed, we highly discourage accessing any URLs ending in ".exe."
Square Enix is continuing to strengthen the security of each PlayOnline service. When we have information that needs to be relayed to our users, it will be posted under "Information." We ask that you especially pay attention to anything added to "Important Notices."

Reporting to the Special Task Force
The Special Task Force relies on everyone's information regarding violations of the user agreement to help keep FINAL FANTASY XI an enjoyable environment, and we appreciate your continuing support and cooperation.

Report to Special Task Force

*Please contact the Square Enix Information Center by telephone or through the "Contact Us" e-mail support under Service & Support in regards to unauthorized access or other concerns regarding your account.

http://www.playonline.com/pcd/topics...05/detail.html

Surprised no one posted anything. Keep up the good work SE.

[Akucaen]

Hacked? SE recommends a full HD wipe. It's so convenient!

[Izzy]

Hacked? SE recommends a full HD wipe. It's so convenient!

I'd rather they recommended something that actually fixes the problem instead of just saying the usual, "plx2b carful w/ur pw k?"

[Lampoon]

Tie your falopian tubes for safety...


Oh sorry, wrong thread!

[Seraph]

Hacked? SE recommends a full HD wipe. It's so convenient!

No, this is actually a very good answer. With so many different ways to be compromised, and so many people who don't know shit about computers, often the best method is a full HD wipe and reinstall.

How many "But Geeksquad said they fixed it!!" posts wre there floating around for awhile? ._.

[SamanosukeShiva]

geez no wonder so many of the customers who usually buy salvage piece from me dissapear... w

[Spekkio]

No, this is actually a very good answer. With so many different ways to be compromised, and so many people who don't know shit about computers, often the best method is a full HD wipe and reinstall.

How many "But Geeksquad said they fixed it!!" posts wre there floating around for awhile? ._.

100% correct. think about it: if you knew the player would be back with their items restored and stealable again, longevity and protection from AV removal would be an exceptionally high priority for your malware design. i'd be infecting notepad.exe and other common windows files most people wouldn't think to look in, and even the bootloader if the OS doesn't protect it well enough (no idea if vista does any kind of integrity check, but i doubt it would be that messy to infect the xp bootloader.) if these virus authors have any common sense, these things will be designed to stick around in the near future and keep hijacking accounts so SE is absolutely giving players the best advice on how to protect themselves.

[doug_ie8]

i can't logon at all, even on my friends accounts, it just keeps saying check your network settings blahblah, and i cant view any part of the POL website at all.

.. is this an indication of bein banned or something on my side, cuz i swear ive tried everything....

edit: i got d/c'd from servers about the same time this post went up ....

[chardero]

so many people who don't know shit about computers

This is so very true to the fact.

There's even guides people have wrote as to how to not get compromised or at least have a better chance at not getting "hacked". It pretty much stems down to either being lazy or really being stupid.

[Toksyuryel]

100% correct. think about it: if you knew the player would be back with their items restored and stealable again, longevity and protection from AV removal would be an exceptionally high priority for your malware design. i'd be infecting notepad.exe and other common windows files most people wouldn't think to look in, and even the bootloader if the OS doesn't protect it well enough (no idea if vista does any kind of integrity check, but i doubt it would be that messy to infect the xp bootloader.) if these virus authors have any common sense, these things will be designed to stick around in the near future and keep hijacking accounts so SE is absolutely giving players the best advice on how to protect themselves.

Any AV software worth its salt is going to check each and every last file on your system, no matter how common it might be. The real reason to format is to protect against the ones your software fails to detect for whatever reason (SE has to assume lowest common denominator here, they have no way of knowing if you use high-quality well-updated software or just some free shit scraped from the bottom of the septic barrel, so for them recommending an HD format is protection against getting sued).

[Massimo]

i can't logon at all, even on my friends accounts, it just keeps saying check your network settings blahblah, and i cant view any part of the POL website at all.

.. is this an indication of bein banned or something on my side, cuz i swear ive tried everything....

edit: i got d/c'd from servers about the same time this post went up ....

It's really not. Probably just your internet or some shit.

If you get banned, it'll say something like "Your account has been closed." and it wouldn't affect you being able to log onto your friends account.

[Valkrish]

Hahaaaa, success

Great success

what's this now, 3-5k bans/month?

[Tricen]

Wonder if I got banned. Let me check!

EDIT: Laaaaaaaaaaame, no b& for me QQ

[Valena]

Isn't 1.8 billion gils pretty low compared to before ?

Either less RMT left to ban than before, or the multiple rollback of hacked characters compensate the values of gils/items loss somehow.

[Seraph]

Isn't 1.8 billion gils pretty low compared to before ?

We running out of fish or something? Wakka wakka wakka!!

[Max™]

They got Ryko... oh wait.

[Kipling]

They got Ryko... oh wait.

lol'd.

[Spekkio]

Any AV software worth its salt is going to check each and every last file on your system, no matter how common it might be. The real reason to format is to protect against the ones your software fails to detect for whatever reason (SE has to assume lowest common denominator here, they have no way of knowing if you use high-quality well-updated software or just some free shit scraped from the bottom of the septic barrel, so for them recommending an HD format is protection against getting sued).

that's my point. the usual lines of "run av software" or "reinstall windows" wouldn't be sufficient if it left any executable code from the prior install intact. since a low distribution malware designed to steal game passwords would not be a high priority virus for an AV software company to identify and build a signature for, it may be a very long time between exploit release and a functioning antivirus signature. given that fact, if you try to reload your OS and assume that will cover it, an infected file (notepad was probably a bad example b/c reloading the OS will probably install a fresh copy of that) that persisted from the prior installation could reinfect your machine and leave you open to be compromised again after your account is restored. by reinstalling your drive from scratch, you ensure that any poison code from the prior install is unable to persist after your attempted cleaning.

[Seraph]

Easy way to explain this the the computer challenged: "Look at your playtime, and ask yourself 'what is a few more hours?'"

I honestly don't know what I would do if i forever lost my account. It's like spending years saving up money, and then the bank just disappears overnight. I'd definately spend more than $12.95 on booze that night...