Runescape account being hacked

[safire13]

About a week ago, my brother was playing Runescape, and he sees my account log on. I have not played runescape for about a year now, so he comes and gets me.

Now, my stats are too high to just let the hacker just take the account. I want to at least sell it, not just lose it to a hacker.

Now, i do the recovery thing, and change my password. The bank pin has been reset and has 3 days left until it's deleted. I am an ex-member so i have a bunch of member stuff in my inventory and bank, so I cant deposit anything and if I take anything out, the only way to get rid of it is to drop it.

2 days later i remember the incidentand try to log in just to make sure.

My password has been changed again, and this time so are the recovery questions.

Now, when I logged on my account, only 1 person was on my friends list. And that was my friends RS account, and he still plays, so I had my suspicions.

So, I answer the recovery questions to the best of my ability for what I know about him. i get the account back (suprise)

So i cancel the bank pin deletion, change the recovery questions toextremly personal things, that no one else knows, and all that good stuff. Change the password again, and this time, install the newset spyware doctor, and Avast scanners. Along with some other stuff. I had no keyloggers, but some advertisements and a web hijacker. So with the keylogger protection on, i reset the recoveries, and change the password (something unguessable).

Now the thing is is that my friend helped me get my account back a couple of times when it was hacked, so he knows some of my previous passwords. But thats the only thing out of all the recovery things he knows.

So i try to log on today, and guess what? yes the password is changed and the recoveries are all in code, so i dont know wtf to do. my appeal is still pending right now.

I think my bank pin is scheduled for 7 days cancelation, i last logged in saturday, so it has 5 days until he has access to my bank.

So i need 4 things

1: Need to know how he keeps recovering the account.
2: File a complaint to jagex about this.
3: Make sure this never happens again
4: get my account back in 4 days.

btw, sorry if this is in the wrong section. I havent been active for a while and forgot were rs stuff goes, if not here.

AND dont give comments like "idk, just go kill your friend and tell him to stop" for some reason I have a feeling it isn't him, even though all signs point to yes. Please dont post unless you are trying to help contributing to the problem, not other stuff. All I need is the 4 questions answered, thats it. Nothing else.

(BTW, when I logged on for the first time it said "you last logged in today from 24.30.230.72" so i would appreciate it if a mod could search the database for the IP, and if everyone pinged it, or whatever it is you do with IP's)

 

[XSafire]

k, um.... i dont remember making the account above, that is just my msn name and i have the same password for this account and that one obviously. The post above is me, i just wasn't thinking when i typed in the username. I noticed when i cheked back to see if there was any replies and it said post count 1. That is it's first post so its not really like I have 2 accounts. Mods, you can delete it, w/e.

 

[dogoncouch]

well you said it used to be a member, if you wrote down the agreement number. you can recover the account with the first pass and agreement number only. it will take about 2 days for the recovery query to take action but if you do have the agreement then the account is yours. also, if you do not have the agreement number, and the account was paid for with your parents credit card. you can make a new account member and use that agreement number. they will see that the agreement number is the same credit card subscibers as the first payments. so if you have your little brothers agreement try that too it might work.

 

[XSafire]

i have the account back now, but how can I ensure that it will stay mine? I dont feel like loggin in every 2 hours to check this.

 

[dogoncouch]

do you know how he is recovering it?

 

[XSafire]

only by using the recovery questions. i changed it so the questions are in code, and answers that only I know.

He might still get passed it. idk how he is doing it.

 

[Doombringe1]

I dont think its good to be his friend if he is doing this to you. But you know what you should do (I did this to my friend when he got anoying). You download a Keylogger onto his computer and have it send all the keys recorded to your email once a day. Then you hold his account randsom untill he promises to never do it again.

 

[the emogod]

You must have a keylogger hidden somewhere... this is how i know...

When recovering an account and not know the recovery questions you have to click "I didnt set these recovery questions" and fill out the rest as you normal do. But after you do this they will be deleted!
So you must have a keylogger tracking the recoverys you set...

This is what you do. As you know keyloggers track your keys from the keyboard, and not your mouse movements (sometimes) but even if they did this would still work...

go to start --> All programs --> Accessories --> Accessibilities --> On screen keyboard

Then a on screen keyboard should pop up. Using the on screen keyboard go to runescape.com and change your recoverys, and password. then you cant be keylogged

if you still get hacked some how it is 100 percent your friend doing it!
Kick his ass...

ill run a check on that IP for you... but most of the time its not accurate and i can only get the country... because it said my ip was in texas, when it was really in Pennsylvania.

i am 100 percent sure its in USA, and does Virginia sound right? if it doesnt it can still be him... Also does he use a router?
Also if he uses Comcast as his provider, then im 1000000 percent sure we got the man...

IP address [?]:  	 24.30.230.72
IP address country: 	flag United States
IP address state: 	Virginia
IP address city: 	Warrenton
IP postcode: 	20187
IP latitude: 	38.733601
IP longitude: 	-77.744400
ISP [?]: 	Comcast Cable
Organization: 	Comcast Cable
Host: 	c-24-30-230-72.hsd1.va.comcast.net
Local Time: 	2007-08-20 23:36

 

[Frostb1tes]

Im pretty sure that if you put it in code then the guy wont be able to recover your account

 

[MorbidIxxl]

Obviously, you have a keylogger hidden somewhere (could possibly be undetectable). Whenever you change your info he gets it. I like to go right to the source of the problem. Say hey, buddy check this out or something, send him a file you have something (say a trojan or a keylogger) attached to (look up freshbind). Good luck and I hope you fuck him over. Also emogod, your wrong. These programs take screenshots as well (such as Ardamax keylogger) and send them to an ftp acc. He will see every letter you click most likely.
-Next time use firefox and encrypt your keys buddy.

 

[Infernal Dave]

Avast sucks, to be honest. Download Spybot - Search and Destroy. My school uses this antivirus.

Also, if you want to check if you have any other servers running on your computer, go to command prompt, and type in

Netstat

and it should tell you all of the servers running on your computer.

The only servers that should be running on your computer are from microsoft. If you see any other server, then you have virus. I don't know if this would check a keylogger though.

 

[g0t 99 4sho]

i like boobies do you like boobies good game