Dead Men Walking

Forum Archive 2023 => dMw Gaming => Gaming Archive => World of Warcraft - Dead Men Raiding => Topic started by: valdeko on February 28, 2010, 04:40:29 PM

Title: Trojan succesfully hacks Authenticator Protected Accounts
Post by: valdeko on February 28, 2010, 04:40:29 PM
Trojan succesfully hacks  Authenticator Protected Accounts
A new virus spawned on  the internet a few days ago and seems to be the first trojan capable of  hacking a WoW account protected by an Authenticator. It was confirmed by  Blizzard a few hours ago.
Quote from: Kropacius (Source (http://forums.wow-europe.com/thread.html?topicId=12730404058&sid=1&pageNo=1#15))
After looking into this, it has been escalated, but  it is a Man in the Middle attack.

http://en.wikipedia.org/wiki/Man-in-the-middle_attack

This  is still perpetrated by key loggers, and no method is always 100%  secure.



Basically,  what the virus does is fairly simple after you're infected :


How  to check if you're infected
Just search for a file named  "emcor.dll" on your computer, it is most likely located in  "C:\Users\(Your user name)\AppData\Temp" but I suggest that you check  everything just to be sure. If you do find the file, delete it and make  sure you update your anti-virus to prevent any further problem.

To  be honest, if you found this file your account is probably already  compromised.

What does it mean exactly?




So best check your Computers guys.

Got the info from MMO-Champion.com who got it from a blizz blue post.
Title: Trojan succesfully hacks Authenticator Protected Accounts
Post by: Deminion on February 28, 2010, 06:01:38 PM
just checked my main drive, nothing there.
However, do anyone know of a proper firewall i can use on vista?
Title: Trojan succesfully hacks Authenticator Protected Accounts
Post by: delanvital on February 28, 2010, 06:41:03 PM
Quote from: Deminion;304858just checked my main drive, nothing there.
However, do anyone know of a proper firewall i can use on vista?

Hey, a fellow Dane :)

If you can do with anti-virus along the way, I'd suggest ESET, Smart Security version. www.eset.com (http://www.eset.com), or the Danish site, www.eset.dk (http://www.eset.dk). It does the job, doesn't hog the PC and has an adequate amount advanced features.
Title: Trojan succesfully hacks Authenticator Protected Accounts
Post by: DannagE on February 28, 2010, 08:42:42 PM
http://www.microsoft.com/Security_Essentials/
Title: Trojan succesfully hacks Authenticator Protected Accounts
Post by: Drakelin on February 28, 2010, 11:18:47 PM
Quote from: DannagE;304878http://www.microsoft.com/Security_Essentials/

just make sure that its the one from microsoft theres a malware program named the same but with 2010 behind it very hard to get rid of :)