Keylogger Warning!

#0 - Sept. 4, 2008, 3:25 p.m.
Blizzard Post
If you have visited the website http://www.warcraftmovies.com today you will have been infected by a keylogger!!! (Win32/LineageX!generic). The admins of this site have been contacted and the threat was confirmed and has been removed now. (No harmfull intent was done by the admin, their site was hacked by a hacker). But please run a scan of your system.

The following AV scanners will detect and remove the file from your system.

Company Name Detection Name
AhnLab Win-Trojan/Magania.63800

Avast Win32:Trojan-gen {Other}

AVG (GriSoft) Generic10.AUIP

AVG 7.5 (A.k.a AVGFree) Unknown

Avira TR/Spy.Gen

BitDefender Trojan.Crypt.Delf.AA

ClamAV PUA.Packed.UPack-2

eSafe (Alladin) Suspicious File [104]

FortiNet W32/Lineage.DNQ!tr.pws

F-Prot ~W32/Heuristic-210!Eldorado (damaged)

Kaspersky Trojan-GameThief.Win32.Magania.uyl

Microsoft PWS:Win32/Lineage.gen!A

McAfee Win32/LineageX!generic

Norman w32/suspicious_u.gen

Panda Trj/Lineage.BZE

Rising Trojan.Win32.Agent.zri

Sophos Troj/PWS-Gen

Trend Micro Mal_Lineage

Vba32 MalwareScope.Trojan-PSW.Game.14

V-Buster ~Packed/Upack

Vet (Computer Associates) Win32/Lineage!generic

As you may have noticed, one of the most used AV scanners DOES NOT recognize the threat: Norton!!! So if you are using Norton, please run an online scan using one of the above mentioned product.

If you have been infected and hacked, please follow the links below on how to get back control over your account.

How to Recover a Compromised Account
http://forums.wow-europe.com/thread.html?topicId=17191745&sid=1

How to REALLY avoid getting hacked
http://forums.wow-europe.com/thread.html?topicId=102690401&sid=1

To remove a specificly found trojan
http://forums.wow-europe.com/thread.html?topicId=282518345

More about account security on our Technical Support forums
http://forums.wow-europe.com/thread.html?topicId=35983697&sid=1

After removing the infection, you should reset your password once more and report the issue to a Game Master as recommended in the first sticky I listed.

Best of luck!

***Just for the record, I am in no way related or involved with Warcraftmovies.com it's affiliates or Blizzard***
#3 - Sept. 4, 2008, 3:50 p.m.
Blizzard Post
Thanks for the heads up, Vincenpi :-)

Q u o t e:
How to Recover a Compromised Account
http://forums.wow-europe.com/thread.html?topicId=17191745&sid=1

How to REALLY avoid getting hacked
http://forums.wow-europe.com/thread.html?topicId=102690401&sid=1

To remove a specificly found trojan
http://forums.wow-europe.com/thread.html?topicId=282518345

More about account security on our Technical Support forums
http://forums.wow-europe.com/thread.html?topicId=35983697&sid=1


Just quoting this for emphasis :-)