Virus/spyware scanned on upload
Compatible with v2.4 Author:WoWACE Download size: 754.19 kB Dependencies:None
Updated 21/10/2008 (42 minutes ago) 54 total downloads / downloads this week: 54 / downloads today: 54
Contains DR/Spy.Ardamax.N.548 virus, according to Antiarc's antivirus. The zip file also triggered nevcairiel's Windows Defender.
[10/22 02:02:47] <@Shirik|AFK> It installs itself to the control panel
[10/22 02:02:49] <@Shirik|AFK> that's pretty awesome
[10/22 02:04:07] <Antiarc> Decompress that zip
[10/22 02:04:15] <Antiarc> And you get 3_0.2 Omen.exe and fraps.txt
[10/22 02:04:51] <@Shirik|AFK> it creates system files, registers itself with autorun
[10/22 02:05:10] <@Shirik|AFK> it's also partially encrypted so I can't really see what it does
I stopped downloading all but 1 or 2 addons from that site a long time ago because of their frequent trojan episodes. I don't know why anyone would want to host anything there any more; it's slower and uglier than Curse and WoWInterface, and infested with trojan keyloggers.
There is more than just that one. Someone took my metzremix, added the exe and is taking claim for it over there :( Getting harassed by this guy in the ui/macros forum. The files have been up there for over an hour already with tons of downloads. He deletes every comment we make.
Why would anyone ever launch an executable file from within an archive they expect to contain a WoW addon?
Well, although there is more than one, the one that started this topic is labeled "WoWACE Updater." There are a lot of folks out there who'd like their crack back.
As far as other .exe-containing "addons" and their users, they're likely uneducated and never bothered learning what they are downloading and what it should contain.
I've filed multiple reports demanding take down and they've not done anything yet.
This is bullshit.
I oddly remember when you could PM Rushter or E and get something done semi-quickly. Now? Beh. Sadly hammering away at them seems to be the only way things get done and that really stinks, especially with the number of mods and people looking after the download section.
-
View User Profile
-
View Posts
-
Send Message
Curse Premiumhttp://wowui.worldofwar.net/?p=mod&m=6654
Contains DR/Spy.Ardamax.N.548 virus, according to Antiarc's antivirus. The zip file also triggered nevcairiel's Windows Defender.
[10/22 02:02:47] <@Shirik|AFK> It installs itself to the control panel
[10/22 02:02:49] <@Shirik|AFK> that's pretty awesome
[10/22 02:04:07] <Antiarc> Decompress that zip
[10/22 02:04:15] <Antiarc> And you get 3_0.2 Omen.exe and fraps.txt
[10/22 02:04:51] <@Shirik|AFK> it creates system files, registers itself with autorun
[10/22 02:05:10] <@Shirik|AFK> it's also partially encrypted so I can't really see what it does
Additional Information:
http://forums.worldofwarcraft.com/thread.html?topicId=11296588317&sid=1
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumDropped:Trojan.Keylog.Ardamax.NAI
http://www.ardamax.com/keylogger/
GG WoWUI. This is the second (or was it 3rd ?) time it has been hijacked and it starting to bug me having addons hosted there already.
DO NOT make any attempt to run that executable from the zip !
-
View User Profile
-
View Posts
-
Send Message
Forum ModeratorI submitted the file to all anti-viruses, although, expect some delay.
It's double zipped.
Now how long till they delete the comments on the addon? :P
*edit* hrm... the comments have been deleted and replaced by others telling people to download it, nice.
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumWell, although there is more than one, the one that started this topic is labeled "WoWACE Updater." There are a lot of folks out there who'd like their crack back.
As far as other .exe-containing "addons" and their users, they're likely uneducated and never bothered learning what they are downloading and what it should contain.
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumI used to like the people over at WoWUI, but they lack of prompt response to stuff like this is sad.
This is bullshit.
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumNo, this is.
<Do not click whilst eating>
me too :( I'm a sad panda with my ui being one of the4m that got stolen and had a file added to it :(
Bullshit is an understatement.
-
View User Profile
-
View Posts
-
Send Message
Curse PremiumPlease help guys http://www.worldofwar.net/forums/showthread.php?p=4164691&posted=1#post4164691
Theres my thread over there. now they are going to harass me for this BS. I would really love to see this site shut down right now!