First of all i just wanna add that my english could be alittle rusty.

Okey, i had a little problem with my WoW, and i desided to reinstall it. And when i installed and when i was about to download the second patch WoW shows "Connot apply the patch right now, please try again later" something like that. And after that my virusprogram detects a Trojan virus, And when im reading about it it says its a specific WoW trojan that steals account passwords. Now since i cant log into wow i cant see if my accound has been hacked or something, But the WoW-europe pass still works, i dont know if these "hackers" change the password. The viruscanner says the Trojan is deleted, but i dont know.

Lets say my account has been hacked, what can i do? Do i get my account back?
And is there anyone that has been hacked and can tell me what that did? Like stole gear and account, or just stole the gold?

Can go to sleep right now ^^ im so worried

Hi all,

We're investigating this at the moment. It seems some anti-virus programs were updated last night with new definitions, and they're now identifying the Background Downloader and some patch files as a trojan. We're trying to examine this further here and we'll let you know as we have any information.

Rahikainen, I doubt the downloader has spread a virus, but don't do that just yet. Wait a little while as we investigate this, then we'll be able to give you a definitive answer. I'm sorry for the inconvenience, but we want to be absolutely sure about this before we recommend anything to anyone.

Hi all,

A note from the other thread where I just posted; if you have Kaspersky, please update it now. A new file definition has just been released and it shouldn't now identify these files as a trojan.

When you update it, make sure the file you're updating to's version is 6.0.2.627 and the time on it is 13:07:57

Other anti-virus tools I'm not sure about, we've not heard anything about updates. All we can say is; keep updating your anti virus tools.

We're still looking into this and we'll let you know as soon as we have anything else on this matter.

I still wouldn't, until at least either:

a) there's an update which means that F-Secure isn't identifying the files as trojans, or

b) we get some more information on whether or not it's totally safe to turn off your anti virus and patch.

Sorry if we sound a little cautious, just in these days when it seems every hacker is targeting World of Warcraft accounts, I don't want to tell you to do something that might cause terrible consequences for you and your account.

Sorry for the delay etc...just we're still investigating.

Rith, we're still investigating this. McAfee and Kaspersky now shouldn't register it as a trojan, so it's looking like it's just a false positive stemmed from some Definition file updates.

However I'm still not going to recommend turning off anti-virus programs and patching, just in case. Keep updating your Anti Virus! There should be an update soon that'll resolve this problem.

I think the main thing I need to make sure you all know here is; don't panic. It's not looking like it's a trojan, just a false positive. Don't worry about your account being hacked or compromised from this particular event, but don't try the game until the anti virus program ok's it. We need to be absolutely sure about this before you start using your game again.

Just make sure you keep checking the manufacturer of your anti-virus's website for definitions files, hopefully you should get one soon which will 'pass' these files.

Hello all,

AntiVir have released an update that will get around this, so if you use AntiVir, update it now and then do a scan, hopefully it won't pick it up.

I think it's only F-Secure saying it's a trojan. F-Secure have said that they'll update the definitions, so please just keep checking their website for updates.

Hi Cyberspirit,

We think so. Updating the Virus Scanners is removing the Trojan alert, but if your particular scanner is still flagging it as a trojan, please don't patch the game just yet.

I'm sorry but I'm just wanting to be cautious. Although it appears to be a false positive, as with Kaspersky, AntiVir etc.. updating the definitions is solving the problem, I don't want to just say 'use the files' because there could still be a problem somewhere.

Not much of an answer I know, but it's all we got right now.

---

Q u o t e:


Blizz is atm in the process of gathering sistem information from users ( for future upgades to wow engine )
How u gather those informations? by scaning users pc's. How u scan someone pc? with programs that act like a trojan.

So the patch was proly just upgrading blizz scaning program among other game bug fixes ... and ofc that antivirus programs saw it as a mallware.
What they do now is proly call all antivirus companys and tell them to ignore the "virus" .. its blizz baby and its needed :D

---

Actually the patch was to solve a couple of bugs that where discovered after 3.2.0 was released.

• Fixed an exploit players were using with / commands
• Fixed a performance issue with players logging into the game
• Fixed an issue with Mac clients freezing near water
• Fixed a crash Mac clients were experiencing with shadows on Fixed Function cards
• Fixed an art issue with Frey Hard Mode where the light beams were visually too hard to see
• Fixed an issue with Loaner mounts requiring Cold Weather Flying

The process for collecting no personal user information has been included in the game for quite sometime, this has nothing to do with the false positives that have been reported with this patch