Poster: Tyren at 8/8/2005 2:09:15 PM PDT
Subject: New Trojan Alert <Password Theft> |
| |
Taken from the Tech Support forum. Please read this information and take precautions against possible trojans. If you have any questions or concerns, please visit the Tech Support forum here: http://forums.worldofwarcraft.com/board.aspx?fn=wow-tech-support
----------------------
It has come to light that a Trojan horse has been distributed that could possibly steal your password and is World of Warcraft specific. Please take caution in what you download and ensure that you perform a virus scan on your system.
This page from Symatec outlines the Trojan.
http://securityresponse.symantec.com/avcenter/venc/data/pwsteal.wowcraft.html
Be sure to look for processes that could be suspect.
svhost32.exe (not to be confused with svchost.exe)
Internat.exe
___________________________
HOW TO LOCATE THESE PROCESSES ON YOUR SYSTEM.
First press CTRL-ALT-DEL on the keyboard, all three keys at the same time.
This will appear to close off access to the desktop and bring up a new window. There will be a button called "Task Manager" clicking that button will return the desktop and bring up a new window called "Windows Task Manager". There will be a tab in that window called "Processes", these are the running processes on your system. The list will range from 30-40 processes in total and may contain some of the listed processes. Be careful to identify the correct processes. I.E the process ( svchost.exe ) is a Windows process that is required to be running, you will probably have several of these running. However the Trojan uses a file name that is almost identical to hopefully hide, the process ( svhost.exe ) belongs to this Trojan, also another variation is ( scvhost.exe ) which is a Trojan that is unrelated.
If you open a web search program such as Google or Ask Jeeves and search for the processes name you will find information on that process.
__________________________
The function of this Trojan is to steal passwords to World of Warcraft, ensure that your Virus protection program is fully updated and that you have scanned recently and not downloaded anything questionable that could possibly be harmful to your system and account.
I do not know if the mainstream Virus protection programs have included this Trojan in their definitions files and/or updates yet. Below is the link to our computer security page, there are free security programs available there.
http://www.blizzard.com/support/wow/?id=aww0462p[ post edited by Tyren ]
| | | http://forums.worldofwarcraft.com/thread.aspx?fn=wow-general&t=4378739&p=#post4378739 |
View all recent official Blue Posts
|
