[Necro] Wowhead Client installer showing a virus?

Beitrag von Nitronoddy

Hi guys, im a pre MoP returning player and thought id installed the Wowhead Client to share some love back from all the questing help ive gotten from reading Wowhead pages.

Ive been running the client for a few days but today as it went to load up it found a new version. Once downloaded and trying to install it my antivirius shows the following warning... is this just a false positive? How should i continue?

Virus found Win32/Heri
***f:\WowHead\Wowhead_Client.exe

Beitrag von Sas148

Definitely a false positive. Can you provide more details so we can look into it though? What is the Virus Protection program? Did it provide a more detailed report you can copy/paste here for us? Thanks!

Beitrag von Nitronoddy

It was AVG Internet Security and i did take a screen shot of the initial report :

https://s25.postimg.cc/owee3rhd7/wowhread_client.jpg(##RESPBREAK##)2##DELIM##Sas148##DELIM##

Beitrag von thebdc

Had the same with Windows Defender (or whatever that built-in antivirus is called). Said it was "Trojan:Script/Cloxer.A!cl" and linked to this site: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aScript%2fCloxer.A!cl&threatid=2147725998

Beitrag von 6axyc

Today Windows Defender (Win10, 64bit) block WowHead Client after its running, downloading new version and trying to update.
Trojan:Win32/Cloxer.D!cl

https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aWin32%2fCloxer.D!cl&threatid=2147726003

After I replace Client (2018) to the older version (2016) from the site, same problem.

https://s33.postimg.cc/s49kggndb/Wowhead_client.jpg

Beitrag von geekette828

My Windows Defender also picked this up today as a threat. This was my first time trying to install the client.

https://imgur.com/a/v9ZHf6G

Beitrag von Sas148

This is certainly a false positive due to a recent update, we'll look into it. Thanks!

Beitrag von Jaguar

As sad as it is that it happens, I'm "happy" to see that I'm not the only one this is happening too.

A few hours ago I turned on my pc cus I needed it for making an invitation in word and a meeting later tonight with my guild.
Having the pc turned on I also went to make sure everything was up-to-date or needed updating. One program that needed it was the wowhead_client. Imagine my surprised to find that it can't update due to the Cloxer trojan that Microsoft Security Essentials detected.
Now MSE is my antivirus program, but I have MBAM installed too (which I do not use as an antivirus program) to scan with which I did and it didn't find the Cloxer. Neither did MSE.
Searching google I came across Spyhunter 5 (which have been a BIG help several years ago when it was named Spyhunter 4 - it saved my computer at the time), so I downloaded that, scanned and it too didn't find the Cloxer.

I then removed Wowhead_client and wowhead_Looter for good measure and went to download the wowhead client again, figuring that would work.
I'm able to download the client, but not install it. When I try to install it MSE (MIcrosoft Security Essentials) pop up a message telling me that all viruses have been removed. The wowhead client even alerts me on the middle of the screen that it's infected with this cloxer trojan and I can only click OK and then nothing else happens. (Thank god, I mean, I don't want a trojan infecting my machine).

To supply further information, I just now downloaded a fresh version of the wowhead client again.
Download. Place on desktop. Double click file to instal and see first screenshot of what happens:
1: https://imgur.com/NDzkPJV - lower right hand corner pop up message by MSE.

Screenshot nr. 2 is merely to show what MSE shows when detecting the Cloxer Trojan:
2: https://imgur.com/30ZFqbv

It's also really odd that it's there at all. Last time prior to today, that I turned on my pc was on June 10th 2018. It's odd that it didn't detect it on the 10th when wowhead client also needed updating that day.

My OS is Windows 7 Ultimate 64bit english

If you require any additional information, please let me know on what you need and how I would go about providing the information.

Cheers
Jaguar

Beitrag von 6axyc

Works fine now.

Beitrag von Sas148

We launched an update today, it seems that Windows Defender isn't flagging this one, thankfully.

Beitrag von PrefeX

It is still flagging the new version for me

Beitrag von Unlocky

Wowhead client wants to update, right now, and Windows Defender is flagging the update as an trojan: Trojan:Win32/Cloxer.D!cl

Beitrag von Jaguar

I works again, my end.

Thank you for taking the time to make it work.

Beitrag von Mepoc

My Windows Defender keeps finding the Cloxer.D!cl trojan every time I try to run the Wowhead Client. I've tried to download the client again from the website today (July 3rd, 2018), but the problem persisted.

EDIT: I just tried downloading the client again, and this time there were no problems at all. Thank you, Wowhead.

Beitrag von STrek

I am using Hitman Pro 3.8.0 (build 295 (64 bit). Every few days it scans my pc at start up. And today the wowhead client gets flagged for a trojan (Mal/GamePSW-C). Find this very strange and also think it is a fasle positive.
I us the wowhead client already for years, never problems.
Uploaded file tot virus total online scanner and 2 scanners gives a virus alert;

McAfee-GW-Edition BehavesLike.Win32.PUPXDC.bm
Sophos AV Mal/GamePSW-C

all others say it is clean
Seems (by a look to date stamp) that client was update yesterday for me.

Properties found on file wowhead client:
version: 1.9.3.0
Wowhead Client
copyright 2018
size 792 KB
date modified: 02/07/2018 22:45
language: English

I have reported it back as safe.

Beitrag von Jaguar

6 days ago was the last time I was online and therefor also the last time I used the wowhead client.
It did work 6 days ago, however the client didn't seem have installed it as it was suppose to, (personally I've been able to see it in Add/Remove Programs previously), so today when I Double click the wowhead client it want to update it self, but after reaching 100% Microsoft Security Essentials flags it with the Cloxer Trojan and therefor prevents the wowhead client from being updated and installed as the client it self also notify the user about this issue and with only the option to click OK (see link 1) and in doing so nothing gets updated and the program can't be used as a result.

I'm providing another 2 imgur links as in the hope that they might explain something.
Link 1:
https://imgur.com/9SSISBj

Link 2:
https://imgur.com/LbeeaMY

//Jag

Beitrag von anteract

July 4, 1210 PDT

This is the result from the current version downloaded directly from the "download now for windows" button.

https://www.virustotal.com/#/file/cc8433f89ad58d85bae0a4f07f8a7a72683e5e6e012957b366a560a0da970890/detection

You have an issue. And its new. Please use virustotal and verify it yourself.

Beitrag von Leadspitter

Hi all,

Windows Defender (Windows 10 Pro) has just shown an alert about a Trojan called Win32/Fuery.B!cl found in the wowhead client. Someone please tell me this is a false report. :(

I wasn't running the wowhead client at the time.

Thanks

Beitrag von Kyoda

Yeah, I also got a Windows Defender alert about this same Trojan:Win32/Fuery.B!cl.

I think that even the system uninstalled Wowhead Client from my computer.

My system is Windows 8.1 Pro 64 Bits.

And even downloading the client to do an instalation, the Defender detects this Trojan.

Beitrag von Tntdruid

Got Win32/Fuery.B!cl in Windows Defender (Windows 10 Pro) too today.

Can't install the update, get blocked by Windows Defender

[Necro] Wowhead Client installer showing a virus?

Antwort verfassen