Originally Posted by
i luffs yeww
YOUR username and password is stored in the runescape client while you're logged in on your computer. That's how the whole RSBot thing happened. They didn't use a keylogger, they just got the user/pass from those hooks, afaik. If they did use a keylogger, that's just stupid and they don't know much about the client.
They're not stored forever, but if you use a bot (even Simba can do this), even if you don't let it log you in, it can get your user/pass while you use it.