PDA

View Full Version : InfoStealer.WarCraft.D , protected or not ???


TimboZero
September 23rd, 2006, 10:14 AM
Hello Everyone ,

Simple first question for you all , the Thread title 'virus' poped up in the woods on the 19th and is causing quite a stir in the World of Warcraft (hereby refered to as WoW) community as it steals the users password and then decimates their game and game characters. Thus far I have only seen into about it and the 3 variants before it on Symantecs site and Blizzard (WoWs publishers) are warning people about it but doing very little visibly about it.

I have looked in the ThreatSence database but cannot find any reference to it there. Does NOD protect against this 'virus' , does NOD have a different name for it , Does NOD not cover for it because it only affects players of WoW (some 6 million potential victims in Europe alone) or am I looking in the wrong places ????

Many Thanks

Tim

Marcos
September 23rd, 2006, 12:38 PM
Do you mean this one for instance?

AntiVir 7.2.0.18 09.23.2006 TR/Drop.Delf.aom
Authentium 4.93.8 09.23.2006 no virus found
Avast 4.7.844.0 09.22.2006 Win32:Lmir-CO
AVG 386 09.22.2006 PSW.Generic.ZQF
BitDefender 7.2 09.23.2006 Trojan.Agent.NJ
CAT-QuickHeal 8.00 09.22.2006 no virus found
ClamAV devel-20060426 09.23.2006 no virus found
DrWeb 4.33 09.22.2006 Trojan.PWS.Poptang
eTrust-InoculateIT 23.73.3 09.23.2006 Win32/Wow.C!Dropper
eTrust-Vet 30.3.3093 09.22.2006 Win32/Mirtang.A
Ewido 4.0 09.23.2006 Trojan.Small
Fortinet 2.82.0.0 09.23.2006 W32/Wow.R!tr.pws
F-Prot 3.16f 09.23.2006 no virus found
F-Prot4 4.2.1.29 09.23.2006 no virus found
Ikarus 0.2.65.0 09.23.2006 no virus found
Kaspersky 4.0.2.24 09.23.2006 Trojan-PSW.Win32.WOW.r
McAfee 4858 09.22.2006 no virus found
Microsoft 1.1560 09.23.2006 no virus found
NOD32v2 1.1769 09.23.2006 Win32/PSW.WOW.R
Norman 5.90.23 09.22.2006 no virus found
Panda 9.0.0.4 09.23.2006 Suspicious file
Sophos 4.09.0 09.23.2006 Troj/WowPWS-K
Symantec 8.0 09.23.2006 no virus found
TheHacker 6.0.1.077 09.23.2006 no virus found
UNA 1.83 09.22.2006 Trojan.PSW.Win32.WOW.AF10
VBA32 3.11.1 09.23.2006 Trojan-PSW.Win32.WOW.r
VirusBuster 4.3.7:9 09.23.2006 no virus found

TimboZero
September 25th, 2006, 04:05 AM
Thank you for the reply Marcos , do I take it that you mean win32/PSW.WOW.R is the same virus as Infostealer.Warcraft.D (using the Symantec name) ??

Blackspear
September 25th, 2006, 04:11 AM
{QUOTE-> Thank you for the reply Marcos , do I take it that you mean win32/PSW.WOW.R is the same virus as Infostealer.Warcraft.D (using the Symantec name) ?? <-QUOTE}Correct.

Cheers ;D

TimboZero
September 25th, 2006, 06:47 AM
Many Many Thanks all , my mind is now at rest again :)

Regards

Timbo

Blackspear
September 25th, 2006, 06:52 AM
You are welcome, it was all Marcos's doing ;D

Cheers ;D

Brian N
September 25th, 2006, 08:15 AM
Also remember that you can use VB to compare malware names http://www.wilderssecurity.com/showpost.php?p=810163&postcount=7
It requires you to register first however.