Virus warning in wowhead client?
Return to board index
Hi, my antivirus software Webroot SecureAnywhere just deleted wowhead_client.exe because it found W32.Trojan.Medfos.Gen in it. Does that mean it was already in it? Or is it possible I got infected somewhere else and that's where the virus embedded himself?
Might be a false alarm, but I just thought I'd give you a heads-up, let me know if it's ok to download the client again.
The client is clean for me on this end (and we don't have other user complaints, which is usually an indication immediately if there's a problem since we have such a large userbase). If you download it directly from our site and scan it, is there a warning still?
I haven't had a copy of the client for a while (sorry :c) so I downloaded a new one just now and avast! had no problems with it.
I am having the same problem (W32.Trojan.Medfos.Gen) with the wowhead client. I did try re-downloading it and scanning it, with the same problem being detected.
Edit: Scanned with Webroot SecureAnywhere Complete.
Scanning it with WHAT?
The name you describe suggest that you hit an euristic detection, not actual positive indication.
Downloaded the client just now, scanned with Microsoft Security Essentials, no threat was found.
Update: Now no problems with scanning with webroot. No threats, no red flags.
Yeah I found the original zipped install file, and Webroot SecureAnywhere does detect it in it. Let me download again and see what happens.
Nope, downloaded fresh file directly from site, still finds that trojan and wants to delete it.. Using Webroot SecureAnywhere 22.214.171.124
Downloaded the client, scanned with Trend Micro and McAfee, nothing was found.
99% of all cases like this: it's not a virus, but a false positive. Some portion of the code is similar to a known virus.
1% (if at all) is a virus infecting an existing .exe
Neither case is the fault of the actual program.
Just to give this some closure, I contacted Webroot support and they confirmed it was a false alarm.
It's still giving the message that it's an unsafe page though - not sure if you guys can get it cleared so people don't keep running into it. I got a new computer today and went to download it and was warned off.
I'm pretty sure thats webroot you need to grab there as the report is most likely heuristic, so they need to whitelist wowhead or wowheadclient.
Webroot SecureAnywhere no longer detects it as a virus. I guess they update their files pretty fast!
Thanks for al of you looking into it :-)
You are not logged in. Please
to post a reply or
if you don't already have an account.