i've recently downloaded some addons, one of which has to have a keylog on it.  i'm going to list them below, if anyone else has recently had their password changed, please post something:

Auctioneer

Bartender 4

Camera Plus

Carbonite

Clear Font 2

DBM

DHUD

DrDamage

Elkbuffbars

Enchantrix

Grid

Informant

Magic Runes

Omen

OmniCC

OneBag3

PitBull

Prat3.0.1

Promixo

Recount

Rating Buster

Slice Commander

Slidebar

Target Charms

WIM

Mobinfo

ItemdataCache

Dominos

Gatherer

TankPoints

Xperl

OmniCC

Outfitter

MSBT

Tinytip

Natur

if anyone knows of any known problem or keylogging associated with these addons, that information would be very beneficial.. i've already had one character wiped out completely. 

Unless you installed any of those addon from a site other than one of the top three addon sites, OR you installed them via an exe (not the curse client) you did NOT get your keylogger from an addon. This is a topic that is beaten to death. You most likely got hacked via other means and most likely many months ago. It is only now that someone decided to use your login details to hack you.

See for more: THIS and THIS

It's not your addons. Addons are just text files and can't access anything out side the game. Make sure you only download your addons from a reputable site. Also make sure your anti virus and OS is up to date. Bad internet browsing will get you a key logger watch what sites you got to.ex (Gold buying sites or simular.) When all else fails buy the Blizzard Authenticator, but it is not your addons.

Ill never understand why everyone doesnt invest in a blizzard activator.  Cheap, Easy, and youll never have to worry about something like this again.

actually, i'll say it again because it seems people are too stupid to read what i'm telling them..

i just re-partitioned my hard drive, deleted and re-installed windows and did a system recovery.  my pc was back to the state it was when i bought it.

installed i have norton 360, adaware (full version), registry mechanic, and spyware doctor (all full versions).  i have no viruses on my computer, i have no malware, no spyware. it's clean.  there are NO other programs besides the ones i mentioned above + WOW. 

guess what, i still got hacked.. (again).  it's the addons. 

one of the addons i mentioned above, has a keylogger in it.  i'm still not sure which one. 

my acccount was recently attacked again.  this time i had everything on all of my characters (9 total, 4 70s, 1 70+, 2 80s, both in full 5/5 t7/7.5) banks stripped.  2 of them were moved to another server, which the hacker paid for and paid for a name change.  i hope blizzard can use the payment used to track this person, i do wish to persecute. as far as a blizzard authenticator goes, they're currently sold out, and have been for a few weeks.  that's the only reason i haven't bought one yet.  i had a GM suggest buying one from ebay, which i'm going to do right after this post.  i don't care what some forum admin put up, it's not true. i'm saying this because i'm living proof that the addons being downloaded can have keylogs, just like questhelper did a few months ago. 

i'm currently waiting to have my account restored.. again.  twice in less than 10 days.   Sadly, i believe it was sold to someone was because i noticed there were additional characters i know i didn't make.  that person is just got ripped off. 

EDIT:  yes, i changed my password (3 times) and i even changed my registered email address to a new email address, i've taken every step minus the hardware mentioned above to safeguard my account, and yes, i did download these mods from curse.com.

Please take the time to read and understand what a keylogger is and how it works. This is just fear mongering and needs to stop now. If you truly feel that one of those listed addons contains a keylogger you will have to do a lot more than just insist that they do. PROOF, in the way of an EXE is necessary. A keylogger MUST be an executable program and nothing else. There is NO way that an addon which just contains Lua, TOC, XML, or some additional resource files (images, sounds, etc) is a keylogger.

Please, please, please stop spreading these accusations until you have something to back them up. Take the time and tell us exactly what you downloaded (I mean URL) and how you installed them (manually, automatic installer, etc)

Yova, there are no APIs (instruction calls to do, perform, or access some activity or data) that have outside access to the internet beyond World of Warcraft. An addon is just text files that, if you were to double click them outside of WoW, would prompt you to view them in a text editor like Notepad or Word. They are not programs that can be run. Addons are just like your resume, and I for one would like to see your resume hack Warcraft all by itself.

If, by some fluke, you downloaded an addon that contains a keylogger, virus, or other malware, it was in the .zip file, and once extracted, any up to date antivirus would find and eliminate the problem leaving the addon itself intact. I have downloaded and installed almost every addon you listed in your original post recently and have never seen any problems from Curse.

As both Camealion and Teek have pointed out, if you indeed got a keylogger, you got it somewhere else, either from bad surfing habits, buying gold, or an infected outside source such as a memory stick or other removable media. Maybe even a random hack from some guy trolling for IPs on your ISP.

Calling people stupid will not help your cause, especially since we, as authors of addons, know what can and cannot be done. If anything, we could turn your statement around on you; I choose to take the higher road and point out your error in deductive reasoning rather than name calling.

Tell you what, however. Read all the APIs and methods at http://wowprogramming.com and if you can find some access that justifies your position, then I'll be happy to apologize to you. But I already know you won't, since they don't exist.

Point blank: you got hacked in some other way other than addons.

  Quote:

Originally Posted by Yova

actually, i'll say it again because it seems people are too stupid to read what i'm telling them..

No, you're too stupid to do a little bit of f***ing research. Addons CANNOT do what you are describing. The only way that this can happen is through a keylogging PROGRAM, which runs seperately from WoW.

Those anti-virus and anti-malware programs do nothing for your intenet safety. I do not run a computer that has AV software on it, and I don't have any problems with this stuff. It's all about common sense, which clearly you haven't got.

Stop being an ignorant computer user and start using your f***ing head. How about you try a little experiment and disable your addons to see if you get hacked again? Didn't actually think to try that, now did you? Just quick to blame the first thing that you can lay eyes on when something goes wrong.

Get stuffed and find your help elsewhere. I for one think that the forum admins should ban you.

This thread needs to be locked before it degrades any further. Accusations are just that unless they carry proof. Without links to the suspect addons then how can anyone prove to Yova that he is wrong and while Yova's post was a bit on the snotty side I think that we should let him try and prove his accusation. Unless he can provide links to the suspect addons within a reasonable amount of time then I say lock this thread.

We all know that addons from reputable sites and that are not automatic installers can not contain keyloggers it seems that Yova has yet to understand this so let's give him some time to prove his point without driving him away before he has a chance to.

  Quote:

Originally Posted by teek5449

This thread needs to be locked before it degrades any further. Accusations are just that unless they carry proof. Without links to the suspect addons then how can anyone prove to Yova that he is wrong and while Yova's post was a bit on the snotty side I think that we should let him try and prove his accusation. Unless he can provide links to the suspect addons within a reasonable amount of time then I say lock this thread.

We all know that addons from reputable sites and that are not automatic installers can not contain keyloggers it seems that Yova has yet to understand this so let's give him some time to prove his point without driving him away before he has a chance to.

every addon, and i do mean EVERY ADDON, i've ever downloaded, came from www.curse.com. 

i've been downloading off this site for over more than a year now, never had issues until now.  i don't buy gold, i don't do much surfering on this computer and no one else in the house uses it, it's my personal laptop, everyone in the house has their own.  i will say, this site offers alot of good addons, that's without a doubt.  however, i know there was an issue a few months ago with questhelper, which had a keylogger on it.  it's not on the current versions, but a bad version was released.  it was the talk on my server.. .now personally, i don't use questhelper, but it does lead one to believe (which i still believe) that addons can come readily with other programs/scripts.  if you call blizzard accounting, they'll tell you the same thing, disable all your addons, it's a program being ran in an addon. 

someone mentioned above about someone trolling on the ISP, could be that as well.  i don't know. 

i'm 1 of 6 in my guild that had this issue come up as well, i don't share my account information with anyone, could also be that our guild is targetted for some reason.  i don't know. 

someone else mentioned play without my addons, i did that for about 2 weeks.. i had no issues, re-downloaded my addons (all from this site, which i do use because i favor it), my problem re-occured, again, which leads me to believe, something i downloaded, has something in it.   could i be wrong? yes, possibly i could, but from simple deductive reasoning, i still think it's one of my addons. 

now, i don't know how the programming works, i just play wow... why would i be left to believe anything different then what i've come to understand which is, that one of those addons i've mentioned above, doesn't have something inside?  it's already happened on 2 different ocassions?  and nothing happened during the time i was addon-less. 

Sorry if i made anyone upset above but i telling me that's it's not one of the addons, especially when i saw a gap in being messed around with really doesn't help support what you're saying to me. 

  Quote:

Originally Posted by teek5449

Please take the time to read and understand what a keylogger is and how it works. This is just fear mongering and needs to stop now. If you truly feel that one of those listed addons contains a keylogger you will have to do a lot more than just insist that they do. PROOF, in the way of an EXE is necessary. A keylogger MUST be an executable program and nothing else. There is NO way that an addon which just contains Lua, TOC, XML, or some additional resource files (images, sounds, etc) is a keylogger.

Please, please, please stop spreading these accusations until you have something to back them up. Take the time and tell us exactly what you downloaded (I mean URL) and how you installed them (manually, automatic installer, etc)

all downloaded off of curse.com and they're all loaded manually, the curse auto-downloader program, i used it once, didn't really like too much, i do everything manually. 

Yova it seems to me there is a very simple solution here now i may be wrong. But if you simple scan anything you download with one of your programs before you open it you can at that point either rest assured that nothing is getting in or in the one and a million chance that you catch smething with the scan you ll know which one it is AND you will have your proof. I myself download from curse constantly and Ive never had an issue with this type of thing and considering I keep around 80 - 100 addons and these are constantly swapped out for new ones Its pretty safe to say that the odds should have caught up to me in these past 2 years or so. In my little knowledge about programming it would be impossable for an addon to do these things and ive yet to meet anyone who has proof that it can

  Quote:

Originally Posted by Yova

all downloaded off of curse.com and they're all loaded manually, the curse auto-downloader program, i used it once, didn't really like too much, i do everything manually.

Proof, proof, proof. Take the time or let it go as a coincidence that you got hacked after you downloaded some addons.