How does my Steam account keep getting hijacked?

Associate
Joined
28 Jun 2005
Posts
1,287
Location
Birmingham
I got keylogged somehow last week and lost my steam account + a few of my gmail accounts, I used another computer to change all my other email account passwords and got them back via google but I wasnt able to get the email account back that I used for Steam as I could not remember enough about the account and the hacker changed the details so I couldnt recover it myself.

I was able to prove my Steam account was mine and I got it back friday and promptly changed all the details and password, the hacker added another game to the account which I asked Steam to remove and they did yesterday but I try to log on today and it's gone again...

I formatted and reinstalled Windows after it happened and I have hardly any programs installed

The guy/girl is from Poland as after I changed my email passwords I got a few Google Account recovery emails in Polish which I ignored

I ticked the 'never keep Steam details on this computer' thingy

I was away the weekend and did not try to log until today

Any help?
 
Last edited:
You didn't click any dodgy Steam urls or emails? i am pretty sure if you wish that Steam can suspend your account for a few days to investigate it since this is what a lot of gaming companies do when they find an account hacked to fully solve the matter so might be worth asking them to do that.
 
You didn't click any dodgy Steam urls or emails? i am pretty sure if you wish that Steam can suspend your account for a few days to investigate it since this is what a lot of gaming companies do when they find an account hacked to fully solve the matter so might be worth asking them to do that.

Nope, I only had emails from Steam Support and as I was away from Friday 6pm till late last night, I hadnt logged in since I changed the emails again after getting the account back.

Yeah, going to ask Steam to suspend the account for a few weeks
 
You can download avg free edition, and scan your computer for virus using that!

Also, what I would do if I got hacked, assuming I could still access my accounts ofcourse, is imidiatly change my passwords.
 
I did all that, changed all my passwords using a different computer, changed my Steam email and password and verified that. But yet I come back after a few days away and I cannot access it again.

Sent Steam a new support question to see what they say.
 
When you say you reformatted / reinstalled windows, did you then restore any data? Ie. did you connect a memory stick or external drive that might still have the keylogger on it?

The other thing you could try is this :

http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

Might show up something the other anti viruses have missed.

Also do the usual secure password stuff - make it different from any other online password you have, don't store it in plain text anywhere on the PC, and make it hard to guess - use upper and lower case, special characters and numbers. It can still be easy to remember - 0nly4me2kno! sort of thing.

Edit - also, VERIFY YOUR STEAM EMAIL!
 
Last edited:
Is your network, router, wifi etc secure?

Yup, WPA2

Are you running any security software on your PC? I'm curious to know what failed, thanks

Microsoft Security Essentials

When you say you reformatted / reinstalled windows, did you then restore any data? Ie. did you connect a memory stick or external drive that might still have the keylogger on it?

The other thing you could try is this :

http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

Might show up something the other anti viruses have missed.

Also do the usual secure password stuff - make it different from any other online password you have, don't store it in plain text anywhere on the PC, and make it hard to guess - use upper and lower case, special characters and numbers. It can still be easy to remember - 0nly4me2kno! sort of thing.

Edit - also, VERIFY YOUR STEAM EMAIL!

Only programs that I got around to installing was AIMP2, Steam (obviously :p) Xfire, MSE and various drivers using manufacturers websites and Windows Update (Which was the first thing I did)

No memory stick or external drive was added or any restore and '0nly4me2kno!' is the exact kind of password that I always use!

Steam Email was verified at 14:58 on Friday, Secret question was changed at 15:10 Friday - both by me!
 
Password changing should be your first port of call. That includes your email account, as if they have that, they can just see your new login details as soon as you change them.
 
Try scanning everywhere with a better AV too, I don't rate Microsoft Security Essentials at all. I use Kaspersky myself and find it's a lot better all round. Not even that expensive either. You could download the trial and scan and see for yourself.
 
Password changing should be your first port of call. That includes your email account, as if they have that, they can just see your new login details as soon as you change them.

ALL of my email account passwords were changed as soon as I was keylogged using another computer. Well infact I changed the passwords for everything.
 
Try scanning everywhere with a better AV too, I don't rate Microsoft Security Essentials at all. I use Kaspersky myself and find it's a lot better all round. Not even that expensive either. You could download the trial and scan and see for yourself.

Thanks, I can get Kaspersky using my Barclays account so i'll try that.
 
Back
Top Bottom