How to check and back hacked accounts

Hello all,

These are the steps for how to check and back hacked accounts, please follow it


First thing people will come telling you that "my user got hacked .....etc"

How to handle it ?


Ask him about Username or ID , and ask him what time was it hacked on and his IP.

Go to Gandalf, check the IP logs for the time interval, if you see a different IP in Logs, Use IP check to see who use this IP, you can know from the rabbits names or emails you will get an idea about who use it.

Next thing you ask the user for these information to be sure he is the right owner of the account

# Old usernames.
# Old Password , and the First Password of the account.
# Old Emails if he used other one before on the account.
# Credits Logs (not needed unless it is a big problem, that you couldn't know any of above infromation)


Use these information and check it with the User Logs on gandalf, if right then do the following:


Change the Email to what the user want, and THEN the password to any password eg: k7j@$md

Tell him to use forgot password option to check his new password.


After then we tell him to do the following:

$ Avoid accepting files from users and players without checking them with AntiVirus Program or use this site
http://virusscan.jotti.org/ it is 13 AntiVirus Online scanner.

$ Don't use "Remember my Password" option

$ Don't give anyone your password

$ Don't write your username and password on fake sites


TakeCare: Some people claim that thier accounts got hacked, to steal others accounts or to change thier things, so be sure by checking IP's and Asking for information as the steps written up.


Now.. check for the hacker IP, if you got his main and rabbit accounts , give him Perm. Ban with reason " Stealing other users accounts".


In Case that the hacked account need to be back to orginal stats before the hack , check the Game logs from gandalf at the time of the hack and check exactly the time before it and then click on"RollBack" option.

Money from drugs and things like so you ask us first because it is only used is special situations by memox or zed7.




Regards,
UltranSa3ek
TheCrims Administrator

[Posted: 26 Sep 2006 19:58]

Yes, but "Logs" do not work correctly.

https://2img.net/r/ihimizer/img177/6386/beztytu322uqn5.png


It's all logs from this account: Balon3Rolek99Neo Respect: 98148

[Posted: 26 Sep 2006 20:49]

game logs will be fixed soon by memox

i am talking about

IP Logs
Username Logs
Password Logs
Email Logs

check with these and about Game logs it will be fixed soon

[Posted: 26 Sep 2006 20:53]

UltranSa3ek wrote:

i am talking about

IP Logs
Username Logs
Password Logs
Email Logs

But if you want back hacked accounts, you have to use "Game Log" :-P

UltranSa3ek wrote:

game logs will be fixed soon by memox

OK, thx ;-)

[Posted: 26 Sep 2006 21:02]

We dont have logs before, i think, day 14-09-2006, because the logs was with bugs, and dont appear, memox fixed it, now we just can see logs after this day.
This in Game Logs.


Now, this is not Abuse job??? about hacked account?
Because Abuse can give back nick, and stats

[Posted: 26 Sep 2006 21:21]

i think we should check it first and then pass it to the abuse crew

same thing if other crew found "something" then pass it to police crew


back to topic


how long the IP log can be read ?
how long each log can be stored/viewed

[Posted: 26 Sep 2006 21:27]

I always see Abuse=police.

No big difference.

[Posted: 26 Sep 2006 21:28]

Well both can work with it, Police can help in the part for specially for getting the hacker.

[Posted: 26 Sep 2006 21:39]

The 2 Crews have the same job.. the only difference is because Abuse can see Abuse reports, Police cant, and Police can ban, Abuse cant
Abuse can change stats, and Police cant...


Just few differences

[Posted: 26 Sep 2006 21:58]