Hi! You sure you don't have trojans which target WOW users?Like Trojan-PSW.Win32.WOW.chhttp://www.blizzard.com/support/wow/?id=aww02035p
Not that I know of. I haven't been doing anything strange with my computer at all. How do I check that?
It only says it found this:
Does ZA find Trojan-PSW.Win32.WOW.ch if I have it?
I think ch is different rg but I don't use WOW. Where did you get the downloads from?I know people write worms to like these to attack WOW and steal people's accounts.
Message Edited by Jeruselem on 06-19-2007 11:44 PM
I got them all from the Blizzard provided BackgroundDownloader and all the updates where downloaded through that program. It's Blizzards own product.
Might be false alarm if these are official patches.The KAV6 anti-virus sometimes crops up with weird false positives.If you haven't found weird activity when using WOW, it could be just a false alarm.Here's all I can find about the rg variant (not much)http://www.viruslist.com/en/viruses/...virusid=161981I suggest you ask Blizzard tech support if the KAV6 anti-virus has been accidently flagging their updates with this kind of issue.
Message Edited by Jeruselem on 06-19-2007 11:52 PM
Ok, thanks for the very quick answer. I'm always nervous when it detects something like this. I just read this. It might be of help to you:
Please read these links from the official WoW forum:
EDIT: looks like a false positive... wait some hours and it should be fixed...Hi!is "C:\Program\Spel\" where you installed the software and not in "programfiles"?You could upload the files at www.virustotal.com and check what other scanners are saying about it.False positives can be sent to newvirus at kasperskty dot com, subject: false positive. Attach the file, in zipped form and password protect it. (include password in the e-mail)If it is confirmed its a real trojan you need toperform a full Antivirus/Antispyware scan but in SAFE MODE.1. Disable system restore;2. Reboot in SAFE MODE3. Manual run ZASS (ZA firewall will be OFF but Antivirus/Antispyware will be functional)3. Run a full ZA AV/AS scan4. Reboot in Normal Mode5. Ensable System restoreHow to start in SAFE MODE: http://www.microsoft.com/resources/d..._failsafe.mspxHow to disable windows SYSTEM RESTORE:http://support.microsoft.com/kb/310405Cheers,Fax
Message Edited by fax on 06-19-2007 07:04 AM
You could quarantine the files (in case Blizzard left a nasty in them), but after reading those threads - it's not definite at all.Could be mis-identification or Blizzard virus control is a little asleep.
Ok, thanks again for the fast response, I really appreciate it! Here is another interesting thread about it. I don't know if it helps any more: