**Asri Falcone Hijacked(Idenity Theft)**

If you were conenient to Dallas I could do a complete nuke,pave,lock on the PC, for fairly cheap (dinner or something).

I'm not going to bother with diagnostics on a forum like this (for reasons other than bitchy backseat techs).

I'd install

1. AVG from grisoft.com
   
2. microsoft anitspyware beta from http://www.microsoft.com/athome/security/spyware/software/default.mspx
   
3. Ad-Aware from www.lavasoft.com
   

Skip mccaffee and norton

and make sure you disconnect from the internet while you clean up your machine.

And I'd get a Mac instead. Behind a router.

Asri, such misuse of your personal computer systems and theft of your accounts constitute a serious crime, and I hope the perp gets at least a few years of jail.

This is very scary, and I really hope Asri's able to get some of her SL assets back. As a preventative measure, make an alt account and dont use it for anything other then holding money & dont tell anyone you have it. Every so often, transfer all of Asri's funds to that alt, save about L$1000, just to have some conveniant spending cash on hand.
==Chris

This is disturbing. Perhaps you could try contacting an organization such as this:

http://www.idtheftcenter.org/vresources.shtml

I would advise contacting the FBI and frame this as identity theft. (Since it is business accounts being hacked.) They may actually want you *not* to erase your hard drive if they act on it.

I just confirmed with Robin Harper that it is impossible to get a password from customer service by calling them. The passwords are stored as encrypted one way hashes - they do not have access to them even if they wanted to give it to someone. They can only reset the password and send it to the email on file. Also, any requests or changes of account information must have the account security question answered correctly.

It certainly sucks what is happening to Asri, but at least it does not appear that customer service is the weak link here and that you can just call and finesse a password out of them.

I just confirmed with Robin Harper that it is impossible to get a password from customer service by calling them. The passwords are stored as encrypted one way hashes - they do not have access to them even if they wanted to give it to someone. They can only reset the password and send it to the email on file. Also, any requests or changes of account information must have the account security question answered correctly.

It certainly sucks what is happening to Asri, but at least it does not appear that customer service is the weak link here and that you can just call and finesse a password out of them.

I'm sorry to hear this.

No they did not give them the PW Cris, but THEY DID talk to this person thinking it was Asri and it really wasnt!

Moved to Notices and Well Wishes.

Bump

seens they move the post....considering its not an announcement or a well wish i was looking for i dont know why it was moved. I posted this because im flustered and dont know what to do about the situation and was looking for the general input of sl residents which was working til it was passed off amungst the birthday crap. just like lindens to look at a pictures and not read the content. (too many big words i suppose)

i did that on the 10th yet nothing....and been hit a few time since.

Exactly my thoughts....this is just horrible and I really hope something can be done soon to fix this mess!

Interesting question is how the password is passed from client to server? Is it encrypted enroute or does it go clear-text. If it's clear-text, any old packet capture tool could grab it. If Asri is in fact choosing secure passwords, with special characters, numerics and mixed case, it would seem that's the only way someone could be grabbing it, short of actually logging in on her actual PC themselves if the "Remember Me" box is checked.

This is, of course, assuming that any chance of a trojan or password grabber has been eliminated already, as others have noted.

Oh no, Asri So sorry to hear what happened to you.

I really hope Lindens take this security issue very serious, and at least raise the level of security to netbank standard. Because we are after all trading with real money here!

I too have experienced not being able to log in because already logged in a few times last year. Since I was able to log in only a few minutes later I didn't think more about it. But after my last attempt to quit sl (mission impossible - lol) a good friend sworn she had seen me come online while I were offline. I asked her and other good friends to tell me if that happened again. And I changed my sl password. Have not happened to me since - that I'm aware of at least.

Cutter: I really hope Lindens have properly encryption to passwords and anything the client sends and receive. But I fear most are sent without encryption

I suggest changing password very often, use your alt as your bank (as I understand she is not exposed to this crime...?), and to install multiple anti-spyware programs and virus checkers. I use PC-Cillin, System Mechanic and AdAware.

Hope this was the last time this have happened to you - and to anyone else! *warm huggs*

{{{hugs Asri}}}

I agree with others that this sounds like a key-logger was put on your computer. These obnoxious pieces of code are not picked up by virus checkers and can easily send out on any of your open communication ports by-passing your firewall.

It is the only way to fully explain your passwords being stolen and the thief seemingly "ahead of you" on all your changes.

Keep an eye out on your credit cards as well. If it was a key logger, they can get your credit info the exact same way. If this person did get greedy, you may have your "paper proof" right there.

It sucks, and I hope you find this person and press charges.

I would also hope Linden Labs would take this as seriously as they did the client hack last month and be as cooperative as possible.

- Rose

Why was this moved here? Good lord! Dont you think this should be in the general forum for discussion and assistance, why was it moved???????????????????

Because it's a notice to the community that her account has been hacked? Feel free to start a general discussion about password security in another forum. This thread belongs here, however.

Lindens have no value per the TOS.

yet they advertise the money making possibilities?

Yehp. Even relatively benign companies like SL frequently distort the truth. The sooner you catch on, the sooner you can join the rest of us bitter, jaded, and disillusioned persons. The world is a vicious place!

jaded? bitter? i only wish my feelings toward that were so ....so....so....eeeeh clear and non-hostile. and accepting bullshit as the way it is just wont happen here....im not capable im pissed.