Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: Trojan-PSW.Win32.WOW.rg

  1. #1
    lateralus Guest

    Default Trojan-PSW.Win32.WOW.rg

    Hi!

    I did a virus scan today and this is what it found: Trojan-PSW.Win32.WOW.rg

    In these files:

    Found in C:\Program\Spel\World Of Warcraft\BackgroundDownloader.exe
    Found in C:\Program\Spel\World Of Warcraft\WoW-2.0.12.6546-to-2.1.0.6692-enGB-downloader.exe
    Found in C:\Program\Spel\World Of Warcraft\WoW-2.1.0.6692-to-2.1.0.6729-enGB-downloader.exe

    And of course also in the System Volume Information\_restore in several places.

    Auto-repair failed and the files were quarantined.

    These must be false warnings I guess? I use WoW and as far as I know these are legitimate updates and files.
    Is this a known issue? I'm sure that other people have informed ZoneAlarm about this if these are false alarms, since there are 9 million users of World Of Warcraft...

    Best regards!

    Operating System:Windows XP Home Edition
    Product Name:ZoneAlarm Internet Security Suite
    Software Version:7.0

  2. #2

    Default Re: Trojan-PSW.Win32.WOW.rg

    Hi! You sure you don't have trojans which target WOW users?Like Trojan-PSW.Win32.WOW.chhttp://www.blizzard.com/support/wow/?id=aww02035p

  3. #3
    lateralus Guest

    Default Re: Trojan-PSW.Win32.WOW.rg

    Hi!

    Not that I know of. I haven't been doing anything strange with my computer at all. How do I check that?

    It only says it found this:

    Trojan-PSW.Win32.WOW.rg

    Does ZA find Trojan-PSW.Win32.WOW.ch if I have it?

    Best regards!

  4. #4

    Default Re: Trojan-PSW.Win32.WOW.rg

    I think ch is different rg but I don't use WOW. Where did you get the downloads from?I know people write worms to like these to attack WOW and steal people's accounts.

    Message Edited by Jeruselem on 06-19-2007 11:44 PM

  5. #5
    lateralus Guest

    Default Re: Trojan-PSW.Win32.WOW.rg

    I got them all from the Blizzard provided BackgroundDownloader and all the updates where downloaded through that program. It's Blizzards own product.

  6. #6

    Default Re: Trojan-PSW.Win32.WOW.rg

    Might be false alarm if these are official patches.The KAV6 anti-virus sometimes crops up with weird false positives.If you haven't found weird activity when using WOW, it could be just a false alarm.Here's all I can find about the rg variant (not much)http://www.viruslist.com/en/viruses/...virusid=161981I suggest you ask Blizzard tech support if the KAV6 anti-virus has been accidently flagging their updates with this kind of issue.

    Message Edited by Jeruselem on 06-19-2007 11:52 PM

  7. #7
    lateralus Guest

    Default Re: Trojan-PSW.Win32.WOW.rg

    Ok, thanks for the very quick answer. I'm always nervous when it detects something like this. I just read this. It might be of help to you:

    Please read these links from the official WoW forum:

    http://forums.wow-europe.com/thread....1065&sid=1
    http://forums.wow-europe.com/thread....0896&sid=1
    http://forums.wow-europe.com/thread....1174&sid=1

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,288

    Default Re: Trojan-PSW.Win32.WOW.rg

    EDIT: looks like a false positive... wait some hours and it should be fixed...Hi!is "C:\Program\Spel\" where you installed the software and not in "programfiles"?You could upload the files at www.virustotal.com and check what other scanners are saying about it.False positives can be sent to newvirus at kasperskty dot com, subject: false positive. Attach the file, in zipped form and password protect it. (include password in the e-mail)If it is confirmed its a real trojan you need toperform a full Antivirus/Antispyware scan but in SAFE MODE.1. Disable system restore;2. Reboot in SAFE MODE3. Manual run ZASS (ZA firewall will be OFF but Antivirus/Antispyware will be functional)3. Run a full ZA AV/AS scan4. Reboot in Normal Mode5. Ensable System restoreHow to start in SAFE MODE: http://www.microsoft.com/resources/d..._failsafe.mspxHow to disable windows SYSTEM RESTORE:http://support.microsoft.com/kb/310405Cheers,Fax

    Message Edited by fax on 06-19-2007 07:04 AM

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  9. #9

    Default Re: Trojan-PSW.Win32.WOW.rg

    You could quarantine the files (in case Blizzard left a nasty in them), but after reading those threads - it's not definite at all.Could be mis-identification or Blizzard virus control is a little asleep.

  10. #10
    lateralus Guest

    Default Re: Trojan-PSW.Win32.WOW.rg

    Ok, thanks again for the fast response, I really appreciate it! Here is another interesting thread about it. I don't know if it helps any more:

    http://forums.worldofwarcraft.com/th...1&pageNo=1

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •