Howdy, Stranger!
It looks like you're new here. If you want to get involved, click one of these buttons!
Quick Links
Warcraft's program to detect trojans...
Cavall
Member Posts: 272
Okay so today I woke up, ate, showered, the usual..tried to login, apparently PW had been changed, however there was no email at my gmail, which means the change was undocumented by battle.net's account page, as there was just the email stating the account had been suspecded due to detecting a trojan, virus, or other keylogger on my computer. Changed PW, and email acc address, of course.
Anyways, the question at hand is quite simple. Can their program, which is actually un-permitted spyware in itself if it runs while the game isn't, have false positives like all other "antivirus" based programs? I checked my PC with many antimalware programs, nothing really showed up. Will post an update here after I can actually log in, which is in a day, but if this turns out to be a mistake from their program, I do hope they intend to rectify what is equivalent to them seeing my wallet and grabbing a dollar from it, then saying "oops, I thought it was dangerous."
Comments
Hmm, I have never run into this issue. I would contact Blizzard if you haven't already and ask them if they can give you any info on the suspension. If they are eating into your time and you haven't done anything wrong, then that is unfortunate to say the least. Maybe try using more than one antivirus/spyware program to see if it may have missed something.
Scanned with 3 so far, still nothing found, and isn't their running of a scan on my PC while I'm asleep (if the email from the account admin team was to be believed) both unwanted and unlawful for that matter?
The Warden background app is another reason to quit WoW. It scans your disk directories and open apps like browsers for their content. Total invasion of privacy, and sure if you aren't doing anything wrong what's to hide? But privacy is still being invaded and principles should be stuck to, otherwise we give up more and more of our liberties and freedoms. And as far as I am concerned freedom overrules privacy invasion any day of the week.
Yeah, really sucks that they can't stop the real hackers/account thieves, yet for some reason this time, without my computer even being proven to be compormised by 3 antivirus/antimalware scans, and the most evil thing I've done with WOW being installing GearScore from the official curse addon site, they've locked down my account for a day. Go Warden!
...Okay, maybe killing those gnomes was evil, too.
Warden does not scan files. here take this spare tin foil hat it will protect you. It's no more intrusive than say Punk buster which is used on many MMO's.
It reads ALL your Windows title bars, and scans the first bytes of ALL your running processes. Warden then "hashes" this information and compares it against a list of "illegal hashes"(cheat/3rd party programs). If it finds a match you might get banned.
So OP warden is not an anti-virus checker or spyware checker so please check with blizzard as it most likey a scam in some way.
Oh and remember the hackers could of had you details for months and only just got around to using it, could of been a keylogger rogg that removed itself after it got the info it wanted or even after a reboot as it only stayed in memory.
It scans your ram, which contains files. So it does scan files. It used to scan directories more directly, and has hidden features which Blizz only talk about when blood runs out of a stone, like Warden prevents players from creating unauthorized copies of the game client. It also searches for rootkits.
"Moderation Bots" are third-party game clients written to monitor, administer, or moderate in game chat channels. While they are not used for cheating, Warden still disables them. Blizzard's stance on moderation bots calls them "Third-Party Programs".
The Electronic Frontier Foundation and other groups have labeled Warden as spyware. Warden actively collects evidence about your WoW account.
It scans the RAM allocated to the game to make sure its not being changed or injected. It does not scan the ram outside of the game.
Which contain files.
/sigh... yes WoW files, files loaded for use in wow.
It does not open up your C drive and start collecting file names, opening .doc .xml .txt .xls file and start scanning it word for word. Cus that what you think.
1. it scans the names of the processes running in task manager looking for a cheat program
2. It scans only the memory being used by WoW to ensure its not being tampered with
3. It scans the window titles of any open windows.
4. Warden only sends back the window title names or process names if it matched against a list of know cheats/hacks. If it suspects nothing it sends nothing.
5. It does not open/send or read your documents and files stored on your PC on HD or Memory.
I'm glad you admit Warden scans files on a players computer.
Well we're not getting any where so back to the OP.
It's possible that warden did detect the virus as it does scan the processes running and it might be loaded with a list of known virus that show up as a process it could of been a false positive though but hey better safe than sorry.
But I would check with blizzard.
So you would rather companies not use no-cheat software, since most do the exact same thing?
It could be as simple as a dirty addon. Or an addon that appeared dirty.
Edit: Off-topic, can we get a multi-quote button already?!
Then, what program were they using to detect if my computer has a trojan, virus, or keylogger on it?
English speaking customers: Please refer to the start of this mail
Para los clientes españoles: Por favor vayan hasta el fin de este correo electrónico
----
An investigation of the World of Warcraft account has produced evidence that the computer(s) used to play the account are infected by a virus, Trojan or keylogger.
To protect your privacy and security, we have temporarily disabled the account for a 24 hour period. During this time, we highly recommend that you follow the below steps to protect yourself and the account from unauthorized third party access.
- Use up-to-date firewall, antivirus, and anti-spyware software to scan your system regularly for viruses, Trojans, and key-loggers.
- Keep your operating system and other software up-to-date and be careful when downloading new software.
- Be wary of "spoof" and scam websites and e-mails that pose as Blizzard Entertainment and request account or personal information. As a reminder, Blizzard Entertainment representatives will *never* ask you for your password.
- Keep your login information confidential. Account access can only be shared with one minor of whom you are the parent or guardian. Sharing access with anyone else is a violation of the game's Terms of Use. You are also responsible for every use of an account on which you are listed as the registered player, whether the use was authorized or not.
- Use separate, unique passwords for your email, World of Warcraft, and any other online accounts.
- Change your passwords regularly and keep World of Warcraft account information updated using the Account Management page at
didn't click it or anything in it, but the email went on and on, was from WoWAccountAdmin@blizzard.com too...and remember, even though my PW had been changed, there was no notification of it
So I'm guessing the PW change is part of its automatic lock-down?
It also said "Please be aware that if viruses, Trojans or keyloggers are found again on computer(s) the account is played from, it may lead to the account being disabled again."
Meaning that these scans are done quite regulary, no?
I like philosophies that presume innocence until proven guilty rather than guilty until proven innocent too. MP3s rather than protected MP4 / AAC and WMA files.
I would agree except for the fact that the reprecussions can be deeper in an MMO. The introduction of duped gold/items can be detrimental to an economy, in a PvP scenario hacks can be downright devestating to everyone elses enjoyment.
Ummm..guys...my thread! Less arguement more..helping?
There nothing anyone here can do. Talk to Blizzard support.
Cavall I believe the message you got is in itself a scam. I got one of these the other day to an obscure email address that I never use for anything other than a support address for a website. In addition to this I don't even play World of Warcraft (which of course was the real obvious tip-off).
If you (carefully) examine the links in the email I think you will find that they are in fact leading to non-Blizzard domains.
If you followed any of the links in the email and/or entered any of your account details you are very likely compromised and I would contact Blizzard immediately.
Good luck.
- MMORPG.COM Staff -
The dead know only one thing: it is better to be alive.
That's the thing, i never clicked them. In fact, I only noticed it after I had tried to log in 5x, realized my PW had been changed, and then went and changed my email and password. I also noticed there was no email saying my password had been changed before change I performed, meaning that if anyone had accessed my account, they never even changed the PW.
As I said could of been warden picking up a process in your task manager that looks like a known virus, trojan or keylogger.
It could of been a false positive or maybe you did have a virus, trojan or keylogger but it was loaded into your volitle memory and so was removed when you reboot the PC.
all anti-viruses scan through your HDD and your personal data and people do not complain. Why should you complain for this? WoW is scanning for known bots, hax and cheats. It doesn't care about all the terrabytes of nasty pron stored on your drive. It doesn't care about any of that. It only cares to protect the rest of people from hackers, exploiters, cheaters and botters. Privacy invasion? I believe you accept their rules in the EULA:
Here is a fragment of the EULA:
Consent to Monitor.
WHEN RUNNING, THE GAME MAY MONITOR YOUR COMPUTER'S RANDOM ACCESS MEMORY (RAM) FOR UNAUTHORIZED THIRD PARTY PROGRAMS RUNNING CONCURRENTLY WITH THE GAME. AN "UNAUTHORIZED THIRD PARTY PROGRAM" AS USED HEREIN SHALL BE DEFINED AS ANY THIRD PARTY SOFTWARE PROHIBITED BY SECTION 2. IN THE EVENT THAT THE GAME DETECTS AN UNAUTHORIZED THIRD PARTY PROGRAM, THE GAME MAY (a) COMMUNICATE INFORMATION BACK TO BLIZZARD, INCLUDING WITHOUT LIMITATION YOUR ACCOUNT NAME, DETAILS ABOUT THE UNAUTHORIZED THIRD PARTY PROGRAM DETECTED, AND THE TIME AND DATE; AND/OR (b) EXERCISE ANY OR ALL OF ITS RIGHTS UNDER THIS AGREEMENT, WITH OR WITHOUT PRIOR NOTICE TO THE USER.
I am the type of player where I like to do everything and anything from time to time.
http://en.wikipedia.org/wiki/Holodomor - pre-WW2 genocide.