I logged into one of my gmail accounts and had a notice that several s-korean IP addresses had accessed my mail account. I don't have any connection to S-korea except through watching the GSL/sc2 and this was the same email address that I used when signing up for gomtv. My other email addresses were fine and I full scanned my computer with Malwarebytes' Anti-Malware and the free avast! Antivirus. I don't browse questionable sites very much and I use a well updated firefox with adblock, noscript etc. and have avast! antivirus running it's free live protection.

I'm only posting this on TL because of the possible connection between this and my involvement with GomTV so I feel it's relevant. What should I be inferring from this and are the probabilities of my computer being safe good?

*Edit: I got a notice from gmail that there was unusual activity on my account, i.e. IP addresses from s-korea having been signed into my account and they were warning/asking if it had been me which ofcourse it wasn't.

BobGayman

89 Posts

April 19 2011 19:58 GMT

Define access. Did they try to login or did they login?

Liquid`EliGE

United States527 Posts

April 19 2011 20:01 GMT

How exactly did u check if they logged on ? How do you go about doing that?

And with the relation to GOM, I think its just a coincidence. If your email was logged into, then chances are your computer being safe is probably not likely >.>

joheinous

Iceland522 Posts

April 19 2011 20:02 GMT

On April 20 2011 04:58 BobGayman wrote:
Define access. Did they try to login or did they login?

They logged in and I even think some of their sessions were active as there were several sessions active for that account that I had to close before changing my password.

joheinous

Iceland522 Posts

April 19 2011 20:03 GMT

On April 20 2011 05:01 Erotheis wrote:
How exactly did u check if they logged on ? How do you go about doing that?

And with the relation to GOM, I think its just a coincidence. If your email was logged into, then chances are your computer being safe is probably not likely >.>

I got a notice from gmail that there was unusual activity on my account, i.e. IP addresses from s-korea having been on my account.

Corr

Denmark796 Posts

April 19 2011 20:03 GMT

How do you check your gmail like that?

Primadog

United States4411 Posts

April 19 2011 20:05 GMT

At the bottom of your gmail page there's an access log and links to further details.

shadowboxer

United States224 Posts

April 19 2011 20:20 GMT

Lucky it was South Korea.

Mine's from China and the second I took my authenticator off my account(Thought I was safe and got annoyed with having to fetch my phone every time I wanted to log in) it got hacked instantly due to being linked to a WoW account as well.

Not sure what harm South Korea could be doing, I don't think their country is in the business of selling accounts/game currency. I do know that if you change your password it doesn't help, I've changed it 3-4 times and they always seem to get back in. It's not keylogger related either as I have a ton of security on this computer and keyloggers are the easiest to detect and I rarely download anything other than replays.

Quite a confusing situation, sorry I couldn't be more help, but you are not the only one this happens to.

kOre

Canada3642 Posts

April 19 2011 21:16 GMT

I got one from South Korea where someone was trying to access my TL.net account ... because when someone tries to reset the password it tells you the IP of where the password reset was requested.

Desti

Germany138 Posts

April 19 2011 21:27 GMT

#10

South Korea has a high density of computers and fast internet accounts without a great firewall, it is a primary target to spread botnet clients.

monkh

United Kingdom568 Posts

April 19 2011 21:30 GMT

#11

can u check ips on hotmail accounts?

Vacant

United States5 Posts

April 29 2011 23:11 GMT

#12

Exact same thing just happened to me. I'm incredibly careful when it comes to PC security. I highly doubt I have a keylogger. I'll probably reformat tonight, just to be safe. One thing I did find suspicious was that I recently downloaded the Chasolauncher widower program for the original StarCraft. When I opened the .rar my antirvirus detected a trojan. I quickly googled it and came to the conclusion that it was a false positive. Anyway, I recovered my account and put an authenticator on it. Still, quite a hassle.

I've literally never had an issue like this before. I figure it must be a keylogger, but how common would it be for my password 8 digits, numbers / letters, to be guessed? It was a pretty week password, I suppose, which is why I beefed it up quite a bit.

Are there any 100% surefire ways of telling whether or not you do indeed have a keylogger? I'm running Avira and it hasn't found anything. Any other tips?

Soft`Soap

Canada865 Posts

April 29 2011 23:58 GMT

#13

Post this on the GOMtv forums and see what they say about it