Warning Trojan on WowUI.worldofwar.net

Someone has uploaded a trojan on WoWUI.IncGamers.com masking it as a resurrected WowAceUpdater.

Do Not DOWNLOAD!

This file was in no way authorized by me or this site, and is a keylogger trojan.

I repeat, DO NOT DOWNLOAD OR EXECUTE!

This is a blatant attempt to steal passwords, please people don't fall ploy to it.

People tried to upload this to our servers earlier and we blocked them. I've petitioned for WOWUI to take it down, however so far they have not.


You must login to post a comment. Don't have an account? Register to get one!

  • 6 comments
  • Avatar of Kaelten Kaelten Oct 22, 2008 at 13:51 UTC - 0 likes

    Rushter: I used the link at the bottom of the description to report it multiple times. And we saw the download counter on the sight break 100.

    Thrillseeker: Right, and I'm really elvis too. Did I forget to mention that?

    WowAce.com & CurseForge.com Adminstrator
    Check out my new addon, OneChoice, it helps you pick quest rewards faster.
    Developer of Ace3, OneBag3, and many other addons and libraries
    Project lead and Mac developer for the Curse Client

  • Avatar of Thrillseeker Thrillseeker Oct 22, 2008 at 08:28 UTC - 0 likes

    Kaelten or anyone else from cursed.com couldn't care less if one of their competitors would get sabotaged.

    And the reportings from wowace.irc can be seen as a plot to cover something else. It would have been quite obvious if they didn't do nothing, right?

  • Avatar of Pastamancer Pastamancer Oct 22, 2008 at 06:11 UTC - 0 likes

    As soon as it was noticed, several people in #wowace used the 'report file' option on wowui's site. If that doesn't count for anything, I don't know what to say.

  • Avatar of rushster rushster Oct 22, 2008 at 03:07 UTC - 0 likes

    Actually I did not see a petition to take it down from you Kaelten. However other users alerted us to it and it was removed as soon as an Admin saw the alert. An investigation as to how the file was even authorised is now underway. From our download stats 75 people appear to have downloaded the file. File was nuked after 5 hours of first alert and as soon as admin saw the alert. Files are no longer on the server.

    Just an update for everyone so they know they don't have to worry.

  • Avatar of DarkAudit DarkAudit Oct 21, 2008 at 22:55 UTC - 0 likes

    Is there anything on worldofwar.net that *isn't* a keylogger? :roll:

  • Avatar of moonwitch moonwitch Oct 21, 2008 at 21:18 UTC - 0 likes

    Should you download it, run every possible anti-virus you can get your hands on, and pretty much everything else. But from what I've read in reports, you'll be pretty screwed if you ran it.

  • 6 comments

Facts

Date created
Oct 21, 2008
Last updated
Oct 22, 2008

Author