compromised plugin?

[ohnoez]

hi,
a few days ago i downloaded the plugin RelogMe by msquare86 which is now in the archive section. How the name says its a relogger, i had to fill in my account name/password, HB name/pw and some settings so it could properly relog the char and restart HB. The plugin didn't work, today I got my account hacked and my antivirus software (Emsisoft Anti-Malware) recognized the zip-file as a trojan.
It was dumb of me giving away these information, but every day I disconnect at 2:30 am and am not able to bot over night, so I really wanted this plugin. Did anybody else witness such a compromised relogger or could give me feedback of the RelogMe Plugin? Thanks, and sorry for bad English

greets,
ohnoez

 

[gimik]

All reloggers before they can be released/downloaded, the Dev team must look at its source code and if it's safe they'll allow it to be downloaded. So if you're able to download it, it's safe.

 

[Laso49]

The relogger NEEDED your acct name / password to LOGIN to wow, The program automates logging in and Cannot without that information. THat relog program is safe, I used ti in the past, Like 6 months ago...

 

[ohnoez]

I'm aware that the relogger needed those information. It just seemed obvious to me because I got hacked for the first time, I'm pretty sure it was no phishing website and no friend, and the file was categorized as malware (name: Worm.Win32.Rebhip!IK). But if the developers verify the safety of it I trust them.
Damn, thought I found the source of the hack :/

 

[zutto]

I'm aware that the relogger needed those information. It just seemed obvious to me because I got hacked for the first time, I'm pretty sure it was no phishing website and no friend, and the file was categorized as malware (name: Worm.Win32.Rebhip!IK). But if the developers verify the safety of it I trust them.
Damn, thought I found the source of the hack :/

Are you aware that Phishing sites/any kind of emails/friends/keyloggers are NOT the only way to get your account information?

 

[gimik]

I was hacked two weeks ago without a keylogger/phishing site. Do you use the same emails/Pw's for your accounts on websites you visit as your WoW account? Hacker's are now hacking popular WoW sites and cracking the user database to get your login info. So if you use the same login for your WoW account as your favorite websites, i suggest changing your WoW pw.

 

[ski]

I'm aware that the relogger needed those information. It just seemed obvious to me because I got hacked for the first time, I'm pretty sure it was no phishing website and no friend, and the file was categorized as malware (name: Worm.Win32.Rebhip!IK). But if the developers verify the safety of it I trust them.
Damn, thought I found the source of the hack :/

Rebhip is a worm that can compromise any .exe. I'd suggest doing some heavy duty scans of your machine with MSE, Hijackthis, and whatever else you like to use.

 

[ohnoez]

I used to have the same pw for everything but by now I realized by myself that this isn't very smart.
And I can't imagine any other way than phishing/friends/malware to get my acc hacked, sorry

Thanks @ Ski for the explanation

 

[Kickazz006]

I suggest a full wipe and reinstall of windows

Also as a side note... If you bot a lot, put the bot on a seperate computer than what you use for internet using other than:

buddyforums
email
wow forums (official)
guild forums

and you'll be just fine

what does this mean about your wow computer?

don't surf porn
don't surf gold sites
dont surf anything wow-related as it can have popups and bugs


I run 3 computers (well, 4 now) ... but you only need 2-3.

I run my rig which bots and only bots, i have buddyforums for its homepage for downloading hb / gb related stuff.
I run my playing rig which I play on, cruise the forums and email, and this is where I sometimes manually play bot accts (ie: 5 toons in a dungeon) or I test profiles before I stick them onto the botting computer... or new updates for crashes, etc.
I run my webpage / itunes computer and I recently put my bittorrent downloads onto another computer

Again, as long as you use common sense, you won't get ur wow accts hacked. This means that your b.net accts shouldn't be your main email or the email that you put into sites. I have my main email (personal), my 2nd email (business), a spoof email for when I have to register to see things. Personal is for my family / friends, business is business or wow related, spoof is for spam related crap

 

[jerastory]

As a side note I only use my work email address as my account name because this email only is accessible at work, and there is no other way to get to it.

 

[Tony]

and by the way its moved to archives by me cause i had many reports that this tool doesnt work anymore