Well I logged on this afternoon successfully. I checked my inventory in bags and bank, and I seem to have everything: weapons, armor, herbs, badges (96 of them!), and gold is all there. In fact, I still have ~40 mins left on the raid buff from Tuesday night. So whoever was on my toon wasn't on for very long. All of my toons' inventories and guild banks seem to be safe and undisturbed.

Luckily, I seem to have dodged a hacker bullet.

Thanks all for the help last night for providing information on what you could see of my character's historical activities of the day. Silvyr, thanks for quick action in guild rank to prevent any unauthorized withdrawals from the guild bank. Hell, I got booted from my alt's guild (but quickly reinvited this evening ).

Everyone please have updated security software. If you make posts on the WoW forums, make sure the machine that you post from is secure. I now have a unique password for my WoW account that is different from any other account. I'm going to order one of those security thingys from Blizzard so I have a number code to enter.

To the officers: would it be worth having some checks on the officer and GM accounts so that in case the same thing happens to them, another officer can demote them in rank so the guild bank is not cleaned out?

Whew! You did get "lucky." I can't believe nothing was sold or taken. The hacker must have been getting ready to sell the account maybe? Glad to have you back all safe and sound!

When it happened to Cadon, the hacker dropped his blacksmithing, picked up herbing and sold just about everything is his bags and bank. Fortunately he did NOT sell any of his epic gear, he was just respec'ed fury with a "broken" blacksmithing chest piece. The hacker actually made quite a bit of money selling all of his ore, etc. Cadon actually opted to just keep things as they were and used the gold the hacker made (still in his mailbox for the most part) to fund his epic mount (partly). So I suppose he was "lucky" as well, although it was a very stressful 2 days, especially when I could see Cadon running between the bank and the AH in Ironforge and I knew he was selling everything.

Dots, you might wanna do a fresh system installation or a scan. The Trojan software could still in your system and logging your new password.