World of Warcraft Account Hacked

[Kelty]

Yesterday morning I discovered my World of Warcraft aattach.txtdds.txtccount had been hacked.  I've been searching for what compromised my system.  I ran complete scans with Microsoft Security Essentials, and Malwarebytes.  I found no viruses or infections.  I downloaded and ran tdsskiller and it found: Service: Creative Audio Engine Licensing Service, C:Program Files (x86)/Common Files/Creative Labs Shared/Service/CttAELicensing.exe and ForgedFile.Multi.Generic.
Attached find the DDS logs    Thank you in advance.

[Maniac]

Hello Kelty and ! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
• Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Please scan your machine with ESET OnlineScan

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.

  ESET OnlineScan

• Click the button.
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.

    Save it to your Desktop.

  • Double click on the to download the ESET Smart Installer. icon on your Desktop.
• Check "YES, I accept the Terms of Use."
• Click the Start button.
• Accept any security warnings from your browser.
• Under Scan Settings, check "Scan Archives" and "Remove found threats"
• Click Advanced settings and select the following:
  • Scan potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• When the scan completes, click List Threats
• Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
• Click the Back button.
• Click the Finish button.

[Kelty]

Hi Borislav and thanks. I bought a pro version for my laptop but not this desktop. By the way, I am now aware that win7 sidebar which I use for notes and weather is a security risk and will remove it when you tell me.  I ran ESET OnlineScan and followed instructions but it found no threats and did not give me a way to "list threats" or "export"

[Maniac]

If you keep your Windows up-to-date, there is no problem with your sidebar.

Please download the Kaspersky Virus Removal Tool from here to your Desktop.

Double-click the Removal Tool.

Click the cog in the upper right corner:

Select down to and including your main drive.

Once done please select the Automatic Scan tab and press Start Scan.

Allow AVP to delete all infections found.

Once it has finished select the Report tab.

Select the Detected threats report from the left and press the Save button.

Save it to your Desktop and post the contents in your next reply.

[Kelty]

I got a 404 error on the link you gave me, googled the software and got a working link back to the same website and software.  I ran it and a message from Kasperky popped in taskbar re password protected file.  I clicked on it (scan stopped) and think it was an rar file.  I have not password protected any files.  I started over and ran new scan ignoring all the password protected files and no threats found hence no save.

[Maniac]

Looks like your system is clean. Please change all of your passwords and take some preventions:

users.telenet.be/bluepatchy/miekiemoes/prevention.html

[Maniac]

Are you still with me?

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!