Recent Hackings and Steps to Ensure Account Safety.

[Feielle]

Simple Solution: Require Current Credit Card Info to Change Password?

Hell, any sort of security question. Mother's maiden name, city you were born in, SS#, wang measurements... ANYTHING would be better than what they've got.

[ringthree]

I didn't know FFXIAH was affected, so now I got them. They were in my registries but not found using file search or virus/adware scanners.

When I found them in my registries, it found all 4, but it also found a fifth called

(Default) TYPE: REG_SZ Data: (value not set)

Should I delete that too?

I believe what you got was when you did a search with regedit, it turned up your previous searches from your control panel. This is noted in the first post in this thread. I don't think you have anything to worry about. LOL

[CharlotteW]

Simple Solution: Require Current Credit Card Info to Change Password?

I mean..it makes it a bitch for those of us who want to change passwords every3months...but then again if someone takes your account it's blatent they stole your credit card info (if this system was done right...)

I don't think requiring any information that is already on your membership/payment profile is a good idea. I'd say something more along the lines of security questions that only you would know the answers to.

But this goes without saying (although some people here need shit spelled out for them), even with tighter security measures, if you're a retard who clicks on every banner, downloads every program that has "ffxi" in the title, and freely gives out your account info, even tighter security won't protect you. (Not pointing fingers at anyone who's account got hacked, just saying it for the more oblivious fools)

[Arkanna]

Another simple way to prevent an account from getting jacked would be for SE to implement an option you could checkmark in POL, "Require hardware-hashed key to match in order to allow login?"

All they would need to do is, create a way to generate a hash based on the hardware in your machine, your NIC's MAC address, or a combination of those, submit that hash to POL, then allow you the option to ONLY allow a login to complete if the hash from that machine matches the hash you submitted via POL.

Such a thing would be considered an additional layer of security and would not be difficult to implement at all.

[Khamsin]

I play FFXI from a desktop and laptop, so being tied to a specific machine wouldn't be good.

Security questions would be good, though. Just so long as its not something like "What color was your first car?" or "Where did you go to High School?" or "Where were you born?" because the first is easy to guess, and the last two you could possibly get lucky on guessing if you knew anything about that player from forums (Location or IP lookup or whatnot.

Questions about things that people don't normally talk about or include in their forum profiles would be best. Same for anything that can be looked up by someone who already has your full name or other info.

EDIT: Just saw this on the other page "Xin Li 233283@qq.com"

Seems only fitting.

[ssjjfar]

When searching for the files in registry I thought I had found the virus, but then realized it might not be it when I read one post that said you could find it you used windows search. I only gone through first two pages of post so far, but is there where you would find that? I'm assuming so cause a few other things I have searched show up in same folder.
HKEY_CURRENT_USER>Software>Microsoft>Search Assistant>ACMru
was the location. Is this where windows puts searches automatically?

[ringthree]

Simple Solution: Require Current Credit Card Info to Change Password?

I mean..it makes it a bitch for those of us who want to change passwords every3months...but then again if someone takes your account it's blatent they stole your credit card info (if this system was done right...)

I don't think requiring any information that is already on your membership/payment profile is a good idea. I'd say something more along the lines of security questions that only you would know the answers to.

But this goes without saying (although some people here need shit spelled out for them), even with tighter security measures, if you're a retard who clicks on every banner, downloads every program that has "ffxi" in the title, and freely gives out your account info, even tighter security won't protect you. (Not pointing fingers at anyone who's account got hacked, just saying it for the more oblivious fools)

MOTHER'S FREAKING MAIDEN NAME. It's so simple, and yet so effective.

[Skeetaru]

OK this has really been bothering me, and I could be setting myself up for some LOLs at me if im wrong but.... in the title of this thread shouldn't it be ENSURE instead of INSURE?

Discuss

[Duber]

When searching for the files in registry I thought I had found the virus, but then realized it might not be it when I read one post that said you could find it you used windows search. I only gone through first two pages of post so far, but is there where you would find that? I'm assuming so cause a few other things I have searched show up in same folder.
HKEY_CURRENT_USER>Software>Microsoft>Search Assistant>ACMru
was the location. Is this where windows puts searches automatically?

yeah, it seems to be windows's search history

[Airenn]

Zosi's right.

It is okay if what you found is in HKEY_CURRENT_USER/Software/Microsoft/Search Assistant/ACMru/5603, probably looks something like:

[HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603]
(Default) REG_SZ   Value not set
000       REG_SZ   in3.dll
001       REG_SZ   rsbo.exe
002       REG_SZ   kb1ss1p.dll
003       REG_SZ   kb1ss1p.sys

That's just the stuff you searched for in start button -> search. You can test it. Type in something completely random, refresh that regedit 5603 folder and it will be there.

Adding this to the main thread if it's ok.

REPEAT: YOU WILL FIND STRINGS INDICATING YOU SEARCHED FOR THE FILES. They are NOT the actual files themself, just the registry confirming that you SEARCHED for it.

Thanks for this exact string to show what it looks like. <3

[Airenn]

OK this has really been bothering me, and I could be setting myself up for some LOLs at me if im wrong but.... in the title of this thread shouldn't it be ENSURE instead of INSURE?

Discuss

Hehe, that made me think, but according to:

Insure

And

Ensure

Which is correct?

[Spira]

I play FFXI from a desktop and laptop, so being tied to a specific machine wouldn't be good.

Security questions would be good, though. Just so long as its not something like "What color was your first car?" or "Where did you go to High School?" or "Where were you born?" because the first is easy to guess, and the last two you could possibly get lucky on guessing if you knew anything about that player from forums (Location or IP lookup or whatnot.

Questions about things that people don't normally talk about or include in their forum profiles would be best. Same for anything that can be looked up by someone who already has your full name or other info.

EDIT: Just saw this on the other page "Xin Li 233283@qq.com"

Seems only fitting.

In case you were wondering what this QQ.com is.. QQ is like the most popular IM program in China. I would giggle when my Chinese friends use it on their laptop. Yes i'm so mature.

[Spira]

OK this has really been bothering me, and I could be setting myself up for some LOLs at me if im wrong but.... in the title of this thread shouldn't it be ENSURE instead of INSURE?

Discuss

Hehe, that made me think, but according to:

Insure

And

Ensure

Which is correct?

Ensure. You can't insure it. If it goes wrong, you're still screwed.

Insure is more commonly interpreted by its 2nd meaning from that link
2. to secure indemnity to or on, in case of loss, damage, or death.

[Skeetaru]

OK this has really been bothering me, and I could be setting myself up for some LOLs at me if im wrong but.... in the title of this thread shouldn't it be ENSURE instead of INSURE?

Discuss

Hehe, that made me think, but according to:

Insure

And

Ensure

Which is correct?

Ensure. You can't insure it. If it goes wrong, you're still screwed.

Insure is more commonly interpreted by its 2nd meaning from that link
2. to secure indemnity to or on, in case of loss, damage, or death.

OK so im right, SONO CAN I PLEASE HAVE THE BANKITTY THING REMOVEDDDDDDDDDDDDDDD <3?

[Cesaria]

OK so am I reading this right? (Bear with me I just got in from work and I'm trying to play catch up on what's gone on overnight/working day)

To be at risk I need to have RealPlayer installed AND to have used Internet Explorer to visit the targetted sites? If I've visted them using Firefox only (didn't have noscript extension installed but I sure as fuck do now) then I'm (relatively) OK?

[Edrick]

OK this has really been bothering me, and I could be setting myself up for some LOLs at me if im wrong but.... in the title of this thread shouldn't it be ENSURE instead of INSURE?

Discuss

Hehe, that made me think, but according to:

Insure

And

Ensure

Which is correct?

Ensure. You can't insure it. If it goes wrong, you're still screwed.

Insure is more commonly interpreted by its 2nd meaning from that link
2. to secure indemnity to or on, in case of loss, damage, or death.

OK so im right, SONO CAN I PLEASE HAVE THE BANKITTY THING REMOVEDDDDDDDDDDDDDDD <3?

Actually, to nitpick more, Insure's #4 definition is "4. ensure (defs. 1–3)."

Technically... Insure is still correct, at that point. >.>

[Spira]

technically yes, but with language, what you mean to say matters less than what the listeners (general public) make of it. If nobody else follows your technically correct definition then it is still as good as a wrong word

[SephYuyX]

OK so am I reading this right? (Bear with me I just got in from work and I'm trying to play catch up on what's gone on overnight/working day)

To be at risk I need to have RealPlayer installed AND to have used Internet Explorer to visit the targetted sites? If I've visted them using Firefox only (didn't have noscript extension installed but I sure as fuck do now) then I'm (relatively) OK?

From what ive read, this must be true for all for you to get infected:

Running IE6 or 7, on Windows 2000 or XP (This includes Server editions as well (Vista should be safe since it's not an NT5 system)), have RealPlayer installed and have all activex options on 'allow' in IE settings (or said "Yes" when the website prompted you to install said activex).

IE5/6 and Win2000/XP is a definite, but I think it's still up in the air if you can get infected or not if you have activex on disable or prompt and even if you dont have RP installed. If it really is the RP exploit that it's supposed to be, then yes you have to have RP installed, but im not sure if it was ever mentioned that the activex (or something else) installs a 'lite' version or something to bypass that.

Edited for clarity.

[Marsala]

Blah, I really hope they don't go to the asking for registry codes to get your PW back. I got my account from a friend when I banned myself to try to quit. He got it from a friend too so neither of us know the registry codes

[Wigit]

IE 7
windows xp serv. pack 2
AVG anti-virus
Search & Destroy
Zone Alarm

rsbo.exe: O

mostly use auto load PW, no idea if that helps against keyloggers. i can't say ive used somepage.com very much in the past year or two but i use ffxi-atlas.com a lot for maps on my sec toon and updated modelviewer from KI recently. thats the only sites i can think of that arent in the norm, ls page, both wikis, AH, and POL. hope that helps! (dont read your forums all that much but illl be checking this one for the next few days if you have questions'n stuff)

ninja edit: i actually Do Not have Realplayer installed on my machine that i know of, i checked the regedit and install/remove programs never found realplayer