Forum Settings
       
Reply To Thread

Bugged site?Follow

#1 Sep 27 2006 at 12:48 AM Rating: Decent
I tried to post this before my net connect dropped and I used back then submit again but that failed. So here is an attempt to post this again so if I dupe shows up later please delete the duplicate.

---
When I run Wow Reader I get the "you need a newer version" because of the new patch. I go to download wow reader. I click the link to download. It sets off Antivir Personal with:

DR/Agent.AK.5

It is a exe in the opera cache because opera names things by whatever convetion the file is unlikely to have the same name twice is my guess. You might want to take a look at why it's setting off a virus monitoring program and thinks that it has that virus. As far as I can tell as the one site it looks like it was likely a backdoor/trojan program. I usually scan everything I download and antivir is usually in constant background scan to prevent infection. I also have both a hardware and a seperate software firewall. Though I run unix most times I do reboot to do the odd thing in windows. Wow is one of them. Anyways you may want to retract your file and put up a warning because probably not everyone background scans or scans on download and could be infected with this backdoor. By the way I had only downloaded this file originally a the other day because I had to pull out the interface addons, etc due to a bug. That first attempt to get this program was fine and not infected. Only today when I try now do I get the virus warning.
#2 Sep 27 2006 at 7:30 AM Rating: Excellent
***
2,553 posts
I just checked the file, it's clean.

Where did you download this file from?
____________________________
--Illia
Fumus, draco magus incoluit mare.
Myrx - 70 Holy Priest, Myr - 70 Resto Shaman, Gryd - 70 Prot Warrior
#3 Sep 27 2006 at 3:26 PM Rating: Decent
I clicked download wow reader from your left nav panel. Then clicked the link on that page that said download. It was after clicking that link it tripped the virus alert. I knew my anti virus was catching/preventing whatever it was so I tested it more than once. Every time I got the alert. Yesterday no problem and no virus warning. Early this morning warning beep and pop up message every time I tried to fetch that file. I found it very odd that it was clean the day before but then not today. I didn't know if the link got gibbled or maybe if the file is pulled from multiple locations and I maybe got the infected location.

I'll test again before I hit submit on this to see if it does it yet again. Yep set off the warning alarm.

I went to: http://wow.allakhazam.com/Wowreader.html

Then clicked the link there that was this: http://db.allakhazam.com/wr-setup.exe

So something on fetch is trying to install a backdoor trojan. It seems to be a newer one as I couldn't find that specific listing in google but ones with a similar name all seem to be backdoors. I also found a trojan awhile back in a different wow program. That one didn't set the alarm off on download and only was found with a system scan after. That was a trojan downloader(win32.zlob) and it was in the WoW Backup program from ui.worldofwar.net. So someone lately has been up to making WoW specific trojans and possibly targeting a few of the bigger WoW community sites.

The virus program that detected the virus here when I clicked on download. Was this one: http://www.free-av.com/
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 20 All times are in CST
Anonymous Guests (20)