WoWInterface

WoWInterface (https://www.wowinterface.com/forums/index.php)
-   Site help, bugs, suggestions/questions (https://www.wowinterface.com/forums/forumdisplay.php?f=18)
-   -   Trojan in UI-pack (https://www.wowinterface.com/forums/showthread.php?t=45657)

fogtoo 01-15-13 03:16 AM

Trojan in UI-pack
 
Couldn't find anywhere to post this, but I found a trojan in this UI pack here:
http://www.wowinterface.com/download...-GanazaUI.html

http://www.f-secure.com/v-descs/trojan_w32_antiav.shtml

Dolby 01-15-13 03:29 AM

Thanks for the report. On 1/12/13 the addon auctionator had a trojan (since we dont host that addon: http://www.curse.com/addons/wow/auctionator#c4438 and as you can see its now clean). This trojan required that you click on the folder auctionator.lnk which is highly unlikely any one would do. It looks like the author only removed the auctionator.lnk file but not the thumbs.db folder.

I have put it on hold until the offending files are removed and contacted the author. You need the auctionator.lnk file to execute the trojan which the author removed but just forgot the thumbs.db folder, so it is safe.

It looks like virus scanners are finally starting to pick this up.

Petrah 01-15-13 01:51 PM

Kaelten said a hacker got in there and uploaded the infected file. Did that happen here as well?

Quote:

A hacker got access to two accounts and used one of them to upload the virus laden file. I've tracked down about five ip addressed and blocked them all, and as of right now it appears to be the only file he infected.


All times are GMT -6. The time now is 12:19 PM.

vBulletin © 2024, Jelsoft Enterprises Ltd
© 2004 - 2022 MMOUI