The sky is falling: player with token hacked? (lolIE)

[Narse]

I'm no expert in this field, so I may be wrong, but to my understanding...

I would say hit F1 on your desktop. If Help comes up, you have an IE core on your system. By what I was able to determine, if you completely remove the IE core from your system, things like Help won't work.

[Sabertiger]

Hit F1, it shows this:

"Windows cannot find 'helpctr.exe'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start Button, and then click Search."

Microsoft help was generally useless anyway.

[Zanmato]

Zanmato, I've not looked at windows updates since this started happening. I'm on 2 desktop PCs, not a laptop. I'll check what updates Microsoft says I need, compare anything with IE to the link you posted, and get back to you on that.

Edit: So I checked Microsoft updates, got a bunch of XP security updates (I doubt it's related but possibly?) and one security update for IE7, Microsoft Security Bulletin MS09-034 - Critical: Cumulative Security Update for Internet Explorer (972260). It says in that update information that it would allow execution of remote code if you viewed a specially crafted web site with IE. Quoted, "This security update also resolves three privately reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer." Make of it what you will, but it doesn't appear to be directly related, unless someone found a similar vulnerability in firefox.

Interesting link you found.

Just wanted to state that the link you posted was updated on August 4, 2009 whereas the link that I posted ( Description of Software Update Services and Windows Server Update Services changes in content for 2009 ) is from August 25, 2009. I’m thinking maybe with all these recent hackings, Microsoft found a security hole in IE and quickly patched it?

Now another interesting thing … so I run Windows Live Update yet again last night, and guess wut … another update for IE. This update had to be released yesterday since I ran Windows Live Update 2 days back. Moar ninja patching? idk.

I didn’t realize I am up to 10 posts. When I get home, I’ll post a screenshot of my live update log to show what IE updates I am talking about.

[The Stig]

Nearly every (IE Related, OS as well) update has the same or 99% similar description. A few system admins here can also confirm this.

However the fact not more people are complaining and this thread has begun to mature makes me want to point my finger at something else now.

[Mafai]

Microsoft security updates for August 2009

Just about everyone of these says:

"This security update resolves several privately reported vulnerabilities in Microsoft Office Web Components that could allow remote code execution if a user viewed a specially crafted Web page"

[jammalamma]

Has anyone else been able to find mules that may be selling off all the stolen gear? I think we have found him on Fenrir as Chuotxanh.

I know it may be a long stretch, but considering being able to buy a kclub 20m below market value, buying a hagun where I will be making a 100% return on my investment, and a lot more stuff from the bazaar that will total up into some major profits, I at least have some suspicion that this may in fact be a mule involved.

They have no concept of the local economy whatsoever and are running around with some pretty big ticket items for sale that I know they should not have.

But I am fairly certain they are in a mad dash to sell everything and getting the fuck out. There's no reason why I should have been able to buy HQ staffs at 1/5th their AH value. Literally everything they had for sale was guaranteed at least a 20% profit. Browsing other servers on FFXIAH, I can't find any economy so fucked up to warrant movement to sell a random assortment of items way, way below their value, especially the kraken.

So if possible could anyone possibly confirm if it is a legit mule just dumping stuff or that it may somehow be involved in all of this.

[Mafai]

Has anyone else been able to find mules that may be selling off all the stolen gear? I think we have found him on Fenrir as Chuotxanh.

I know it may be a long stretch, but considering being able to buy a kclub 20m below market value, buying a hagun where I will be making a 100% return on my investment, and a lot more stuff from the bazaar that will total up into some major profits, I at least have some suspicion that this may in fact be a mule involved.

They have no concept of the local economy whatsoever and are running around with some pretty big ticket items for sale that I know they should not have.

But I am fairly certain they are in a mad dash to sell everything and getting the fuck out. There's no reason why I should have been able to buy HQ staffs at 1/5th their AH value. Literally everything they had for sale was guaranteed at least a 20% profit. Browsing other servers on FFXIAH, I can't find any economy so fucked up to warrant movement to sell a random assortment of items way, way below their value, especially the kraken.

So if possible could anyone possibly confirm if it is a legit mule just dumping stuff or that it may somehow be involved in all of this.

Also a mule shouting to sell stuff cheap on my server, definately involved with his keypunched name.

[machiko]

Sad part is of course, we know they are RMT mules selling off gear from freshly hacked accounts and people are still buying them up cause they can make a quick profit.. If you see these people doing this and it is blatantly obvious they are rmt selling off items very cheap to get rid asap, report them to a GM? I know nobody actually will cause they can make gil out of others misery but still.

We really are the architects of our own demise as a playerbase lol They only exist because people buy gil and the whole operation only works because they can sell this hacked gear off quick in shout/bazaars off asap. Buying it may even mark you as a next target since your showing them you obviously have a lot of excess gil on your char.

Its in everyones intrest to get them reported asap and not take advantage of it.

[Omniyoji]

A lil'off topic but maybe I should have posted this earlier before the thread started dying but oh wells...
For users who use admin accounts on XP, use this for a good security boost:

Drop my Rights

[Dimmauk]

Tonight I clicked on POL to login and I got a screen asking me to update my Playonline ID, password, member ID, basically everything.

Ive never seen this screen before, and it scared the shit out of me.

I couldnt remember my info, so I entered in the incorrect info about 10 times till I got it right.

I ran Hijackthis and sent it to a couple friends, and they say everything looks ok.

Has anyone else seen the update your ID and Password screen?

[cdgreg]

Tonight I clicked on POL to login and I got a screen asking me to update my Playonline ID, password, member ID, basically everything.

Ive never seen this screen before, and it scared the shit out of me.

I couldnt remember my info, so I entered in the incorrect info about 10 times till I got it right.

I ran Hijackthis and sent it to a couple friends, and they say everything looks ok.

Has anyone else seen the update your ID and Password screen?

You seriously entered your information in? I hope you're trolling!

[Dimmauk]

You seriously entered your information in? I hope you're trolling!

I did. I'm not lying. That screen popped up when I clicked window launcher and POL shortcut.

It looked legit though. And when I finally got my info correct, it let me in as normal.

[Mistress Stowastiq]

You seriously entered your information in? I hope you're trolling!

I thought pol would boot you out after a certain amount of failed attempts of logging in, delaying you with a lock out for a certain amount of time also.

[Dimmauk]

I'm wondering if it had anything to do with the credit card thing.

It gave me two options

Register POL ID

and

Server settings.

[Firedemon]

I've had that screen pop up on me a couple years ago, and I remember it because I nearly took a dump in my pants. Nothing happened to me, and it was probably just a coincidence that it happened during this hacking time.

[Dimmauk]

I've had that screen pop up on me a couple years ago, and I remember it because I nearly took a dump in my pants. Nothing happened to me, and it was probably just a coincidence that it happened during this hacking time.

I'm so glad you posted. I've been reading about the hacks, and I didnt see anything about this type of issue. Everything seemed legit, but im paranoid cause of the recent hacks.

[Tempyst]

I'm so glad you posted. I've been reading about the hacks, and I didnt see anything about this type of issue. Everything seemed legit, but im paranoid cause of the recent hacks.

How do you know he isn't one of THEM and he's just lulling you into a false sense of security

[The Stig]

Sounds like POL lost all your settings, that is all. As if you done a fresh install of POL.

[Rellikard]

Did the same thing to me a couple months ago.

[Siniroth]

Sounds like POL lost all your settings, that is all. As if you done a fresh install of POL.

That's the first thing I thought of when he mentioned the two options