check your pc against Virus and malwares...most posible you have a KEYLOGER or a BACKDOOR are designed to steal keys and credit cards codes. GOG WILL NEVER TAKE YOUR CREDIT INFORMATION!

NOTE: it cost me a lot of write this tutorial in English I hope it serves you ... SEE YA!


TO CLEAN YOUR PC

1) Restart your PC on Safe Mode with Networking (restart and press f8)

2) ***download and install MALWAREBYTES, update it .
www.malwarebytes.org/

3 ) USE FULL SCAN and deltree all malware detected.

4) RUN AN ANTIVIRUS ONLINE TO KILL THE REMANET VIRUSES( use panda, eset or karpeski)
http://www.eset.com/us/online-scanner/
or
http://www.kaspersky.com/virus-scanner
or
http://www.pandasecurity.com/activescan/index/

5) download and install CCLEANER
http://www.piriform.com/ccleaner

6) RUN CCLEANER and use the option fix registry


***is not an antivirus, its only function is to remove malwares(ANTIMALWARE).

TAKE THESE USEFUL TIPS:

1) READ THE TERMS OF SERVICE!, Many software (most FREEWARE) force you to accept the installation
of certain malicious softwares (not everything is free) cof..IZArc..cof...If I'm like Spanish speaker I bother to read
the terms of service, to avoid these "tricks". you with more reason must read them as a native English speaker.

2) If you use the popular P2P GPL(uTORRENT, ARES, ETC.) or GPL(GIMP,INCSCAPE, ETC.)
programs for projects in your school or whatever. Get your software from their
official websites. to get them from elsewhere can carry viruses, Avoid use MODIFY VERSIONS TOO.
for these software "I RECOMMEND SOURCEFORGE"

3) Avoid the use of CRACKS!, YOU do not need to be a pirate to use cracks. maybe you want play offline a game that requires continuous connection,
maybe you have a netbook whiout CD-ROM DRIVE or simply you not want waste your limited activations your original game, it's understandable...
many of them have malicious tools implemented, whit these cracks your obtain a program without the nasty drm but at what is cost?

4) always use HTTPS protocol (HTTP INSTEAD) for sites where you using money: GOG, Desura, STEAM, DotEmu, GAMERS GATE, HUMBLE BUNDLE ... ETC.

5) EACH WEEK SCAN YOUR PC AGAINST MALWARE (may be every month).

6 )DO NOT INSTALL SOFTWARE THAT YOU NOT NEED!. too software in your HD is more harder check against malware and is slower. :/

MAC filtering is just annoying but *not* a security feature. Also, even if your local network is compromised, it should not result in installation of malware (and in turn theft) unless the PC was vulnerable anyway.

It is good advice, and worth mentioning (over and over if need be). Thanks for putting the effort into translating the tutorial; hopefully it will save someone similar troubles down the road. +1

Jared has disappeared?

I've always wondered and found it interesting when people start a thread and then never return to respond to any replies they may have gotten.

Another reason I'm thinking troll.

If you never come back, to GOG, that's fine, but whatever store you use in the future I recommend using virtual keyboards. In windows go to the run window (windows key + R) and write "osk" (without quotes). The virtual keyboard is used with the mouse and thus prevents keyloggers from getting sensible information. It wont save you from everything out there, but it's another security measure you can take.

I'm actually speaking in general and not particularly about this OP. I've quite often seen people starting threads, even asking questions or for help with something and then vanish and it always makes me wonder how come.

Frankly, Jared1138 didn't come across to me as pissed off or lashing out in his post. He may be misguided in his assertion that it's GOG's fault, but he was quite polite and calm. Who knows, maybe he got overwhelmed by all the replies he got, or maybe he took some of the advice to heart and is looking into things (bank, his system, etc.) and may come back in a couple of days to tell us the end of his adventure; he might even apologize to GOG (this has actually happened before).

This is a pretty pointless measure. Most malware will pull the data straight out of the web form because it is easier to identify, and even if it was just logging key it can still log the virtual keyboard, as it still just looks like any other key stroke.

Since I see that the OP is from the US it is most likely that he's card has been stolen either in the TARGET card theft or the other 3 to 6 unnamed major retailers.

http://www.huffingtonpost.com/2014/01/17/six-other-stores-are-bein_n_4618414.html

I was part of those that have been affected by the Target theft. It took someone two months to use my credit card, so trying to buy from GOG and then subsequently having fraudulent charges on the card on the same day is either coincidence or the result of keyloggers/viruses. (though the OP hasn't really mentioned fraudulent charges, just "someone stole my info")

And for those not in the know, americans do not use chip cards. They can't be arsed to change their system, too expensive for them (capitalism at it's finest).

Don't get carried away by what you personally would have done in a similar situation.

For one, we don't know how exactly the OP got informed about this CC details having been stolen - let's say their bank called them up; or they called them up because they couldn't use their CC anywhere anymore. if the first thing they thought it's GOG, i.e. that online shop they never visited before, and got upset, while being unaware of the fact that it actually takes a bit of time for such incidents to reveal themselves, then they probably didn't take the time to properly investigate the matter with their bank (a lot more people than you think would react this way).

Also, if their system is compromised and the OP isn't tech-savvy (like a lot of people aren't), then they wouldn't have thought about checking their system for potential keyloggers, trojans and the likes.

And last but not least, more often than not people don't read the terms of use of a side they first sign up with, and I assume that's the case for the OP also, otherwise they would know that GOG doesn't store CC details that could lead to compromises and theft, i.e. they would be looking for the culprit elsewhere in the first place.

Either way, it's not that unimaginable that people on average could react the same way the OP did without necessary being a troll.

Nonsense, we adapted to the metric system pretty well.

Okay bad example. :P

After some google-fu, it seems keyloggers can commonly bypass pretty much any measure you come up with.

Yes. There is no such thing as a partially compromised system*. Your system is either clean and in your control or it isn't.

* OK, with systems with properly user level abstraction it is possible, but almost all home systems don't fall into this category in any meaningful way.