This site makes extensive use of JavaScript.
Please enable JavaScript in your browser.
Classic Theme
Thottbot Theme
Virus warning in wowhead client?
Post Reply
Return to board index
Post by
Hypersky
Hi, my antivirus software Webroot SecureAnywhere just deleted wowhead_client.exe because it found W32.Trojan.Medfos.Gen in it. Does that mean it was already in it? Or is it possible I got infected somewhere else and that's where the virus embedded himself?
Might be a false alarm, but I just thought I'd give you a heads-up, let me know if it's ok to download the client again.
Post by
Ashelia
The client is clean for me on this end (and we don't have other user complaints, which is usually an indication immediately if there's a problem since we have such a large userbase). If you download it directly from our site and scan it, is there a warning still?
Post by
Izichial
I haven't had a copy of the client for a while (sorry :c) so I downloaded a new one just now and avast! had no problems with it.
Post by
CDragen
I am having the same problem (W32.Trojan.Medfos.Gen) with the wowhead client. I did try re-downloading it and scanning it, with the same problem being detected.
Edit: Scanned with Webroot SecureAnywhere Complete.
Post by
AnrDaemon
Scanning it with WHAT?
The name you describe suggest that you hit an euristic detection, not actual positive indication.
Post by
yukonjack
Downloaded the client just now, scanned with Microsoft Security Essentials, no threat was found.
Post by
CDragen
Update: Now no problems with scanning with webroot. No threats, no red flags.
Post by
Hypersky
Yeah I found the original zipped install file, and Webroot SecureAnywhere does detect it in it. Let me download again and see what happens.
**UPDATE
Nope, downloaded fresh file directly from site, still finds that trojan and wants to delete it.. Using Webroot SecureAnywhere 8.0.1.203
Post by
Sas148
Downloaded the client, scanned with Trend Micro and McAfee, nothing was found.
Post by
Nulgar
99% of all cases like this: it's not a virus, but a false positive. Some portion of the code is similar to a known virus.
1% (if at all) is a virus infecting an existing .exe
Neither case is the fault of the actual program.
Post by
c0h3n
Just to give this some closure, I contacted Webroot support and they confirmed it was a false alarm.
Post by
Jenarie
It's still giving the message that it's an unsafe page though - not sure if you guys can get it cleared so people don't keep running into it. I got a new computer today and went to download it and was warned off.
Post by
Nooska
I'm pretty sure thats webroot you need to grab there as the report is most likely heuristic, so they need to whitelist wowhead or wowheadclient.
Post by
Hypersky
UPDATE*
Webroot SecureAnywhere no longer detects it as a virus. I guess they update their files pretty fast!
Thanks for al of you looking into it :-)
Post Reply
You are not logged in. Please
log in
to post a reply or
register
if you don't already have an account.