Trojan/Keylogger

[Cimmerian]

I installed WoW on a computer only a week ago and my site use is very limited, I visit this site regularly, and I got hacked today, the only other remotely WoW related site I visit is WoR which I will also be making aware of this. I'm in the process of locating the keylogger or whatever it might be, just sending a heads up.

[Feel The Power]

Yeah, I think my antivirus caught a trojan after visiting this site the other day, it caught it right after I clicked off my IE after being on the site.

[Deleted]

no? ???
Don't install random scripts your browser asked you to.
Better block all script types and suspicious advertisement.
= win ?

I am not much of an security specialist but I never caught anything on my Firefox with Noscript and AdBlock+(Antivirus,Firewall etc -> Norton 360)

[Cimmerian]

Yeah, I think my antivirus caught a trojan after visiting this site the other day, it caught it right after I clicked off my IE after being on the site.

Any file names would be a help

[Kitharia]

Be sure your using all the updated stuff, flash, your AV, browser, etc. Never had a problem here. Though once I tried Firefox I never looked back, a bad browser will remain vulnerable regardless really, used to use IE.

[Cimmerian]

no? ???
Don't install random scripts your browser asked you to.
Better block all script types and suspicious advertisement.
= win ?

I don't, but I just set up this computer and haven't installed a number of things, am using Google Chrome atm

[bbr]

I installed WoW on a computer only a week ago and my site use is very limited, I visit this site regularly, and I got hacked today, the only other remotely WoW related site I visit is WoR which I will also be making aware of this. I'm in the process of locating the keylogger or whatever it might be, just sending a heads up.

WoR has been hacked several times in the last month, and has been giving off trojans through their adverts.

Just don't visit them ?

[Cimmerian]

WoR has been hacked several times in the last month, and has been giving off trojans through their adverts.

Just don't visit them ?

I gave them a chance after the initial blue tracker intrusion, since I didn't come up with any of the files on my systems, obviously I'm not going to go to that site anymore now.

[Omgwtfbbq]

Yeah, I think my antivirus caught a trojan after visiting this site the other day, it caught it right after I clicked off my IE after being on the site.

Get Firefox
Get NoScript Addon
Be happy man for rest of your live.

At first you will be raging because of NoScript blocking everything and you will have to unlock certain sites to even be able to read them, but after you get used to it you will love it.
Hope you get your account back

[Boubouille]

I'll just say it wasn't MMO-Champion.

[bbr]

I'll just say it wasn't MMO-Champion.

You have the added advantage of not using advertising services like doubleclick, those are prone to giving out all sorts of crap at regular intervals.

[Soulbender]

WoR has been hacked several times in the last month, and has been giving off trojans through their adverts.

+1

- Get an AV (Avast is quite nice for example)
- Use a script blocker (or disable javascript if you like text mode
- Put sites you don't know / don't trust yet in "unsafe zone"
- Don't click on ads. Nothing that needs an ad to sell is worth buying.
edit : update the flash player also, i forgot that.

you can get trojans with all navigators, don't think that because you have "firefox-instead-of-that-IE-crap" you're immune.

Afaik, i visit MMOC from home and from work daily (except weekends), never saw a trojan yet.

[bbr]

Afaik, i visit MMOC from home and from work daily (except weekends), never saw a trojan yet.

Yeah, point being, MMOC uses internal adverts from MLG. Not much that can go wrong there unless they want you to get infected. Which shouldn't happen, ever.

Thott, Wowhead, Curse and WoR use external services, which are thus prone to being exploited.

[chaud]

- Don't click on ads. Nothing that needs an ad to sell is worth buying

WoW runs ads. As well as many products you use daily.

[Soulbender]

WoW runs ads. As well as many products you use daily.

my point. :P

Edit : i like very much the saying "la publicité consiste a donner envie à des gens qui n'en ont pas les moyens d'acheter ce dont ils n'ont pas besoin", mmmmh....

Ads are tools to give people the urge to buy things they don't need with the money they don't have (?)

[Yerbury]

Yeah, point being, MMOC uses internal adverts from MLG. Not much that can go wrong there unless they want you to get infected. Which shouldn't happen, ever.

Thott, Wowhead, Curse and WoR use external services, which are thus prone to being exploited.

For my own peace of mind - if you don't click on their ads, you can generally visit Wowhead, etc with little concern, correct? I'll stop navigating those sites if simply visiting them can cause harm...

[Soulbender]

For my own peace of mind - if you don't click on their ads, you can generally visit Wowhead, etc with little concern, correct? I'll stop navigating those sites if simply visiting them can cause harm...

High trafic sites are generally protecting themselves from hacked ads, so they are more trustworthy.
Still, you trust them by visiting them.

Even "internal" ads can still be hacked, so no one's safe around there.

afaik, wowhead didn't got RECENTLY trojaned.
Could be wrong, but i'd say it's pretty safe. Again, dont run things unexpected, get an AV, you should be fine.


edit: wowhead got bad ads in 2006

[bbr]

WoR got the flash hack, e.g. update your adobe flash player or disable it entirely.

wowhead etc had a different, or similar hack some year or few ago.

[joshmathews]

Hi Friends,
I would like to share something about Torjan Kelogger.If you want to delete Hooker Torjan Kelogger in Windows XP and Vista then take the following steps:
1. Click your Windows Start menu, and then click “Search.”
2. A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
3. Type a Hooker Trojan Keylogger file in the search box, and select “Local Hard Drives.”
4. Click “Search.” Once the file is found, delete it.
Please keep sharing updated information here.

[Soulbender]

thanks for the tip, but i'll use a AV, thanks oO

like, virii have strings in plain text indicating their name inside them, and can be removed with "supr."

And then you woke up?