Spyware with Anti-Virus thinks World of Warcraft is malware.

[GunShip03]

I ran a full system scan today and Spyware Doctor reported that it had found 41 hidden files. When I check the list I found that the files it had detected were components of World of Warcraft. I thought I'd best let you guys know.

Version Information

Product Version 6.1.0.447

Database Version 6.13750

AntiVirus Engine 6.1.0.50

History

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\BackgroundDownloader.exe
23/11/2009 2:53:59 PM:843

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Battle.net.dll
23/11/2009 2:54:00 PM:93

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Blizzard Updater.exe
23/11/2009 2:54:00 PM:203

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\BNUpdate.exe
23/11/2009 2:54:04 PM:109

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\dbghelp.dll
23/11/2009 2:54:04 PM:187

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\DivxDecoder.dll
23/11/2009 2:54:04 PM:281

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\ijl15.dll
23/11/2009 2:54:29 PM:703

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Launcher.exe
23/11/2009 2:54:30 PM:203

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Microsoft.VC80.CRT.manifest
23/11/2009 2:54:30 PM:250

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\msvcr80.dll
23/11/2009 2:54:30 PM:312

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Patch.html
23/11/2009 2:54:30 PM:359

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Patch.txt
23/11/2009 2:54:31 PM:62

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Repair.exe
23/11/2009 2:54:31 PM:140

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Scan.dll
23/11/2009 2:54:31 PM:781

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\unicows.dll
23/11/2009 2:54:32 PM:203

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.1-to-3.0.2-enUS-Win-Update-downloader.exe
23/11/2009 2:54:32 PM:296

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.2.9056-to-3.0.3.9183-enUS-downloader.exe
23/11/2009 2:54:32 PM:406

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.2.9056-to-3.0.3.9183-enUS-patch.exe
23/11/2009 2:54:32 PM:578

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.3.9183-to-3.0.8.9464-enUS-downloader.exe
23/11/2009 2:54:32 PM:671

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.3.9183-to-3.0.8.9464-enUS-patch.exe
23/11/2009 2:54:32 PM:843

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.8.9464-to-3.0.8.9506-enUS-downloader.exe
23/11/2009 2:54:32 PM:968

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.8.9464-to-3.0.8.9506-enUS-patch.exe
23/11/2009 2:54:33 PM:109

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.8.9506-to-3.0.9.9551-enUS-downloader.exe
23/11/2009 2:54:33 PM:218

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.8.9506-to-3.0.9.9551-enUS-patch.exe
23/11/2009 2:54:33 PM:406

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe
23/11/2009 2:54:33 PM:562

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.0.9767-to-3.1.1.9806-enUS-downloader.exe
23/11/2009 2:54:33 PM:640

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.0.9767-to-3.1.1.9806-enUS-patch.exe
23/11/2009 2:54:33 PM:828

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.1.9806-to-3.1.1.9835-enUS-downloader.exe
23/11/2009 2:54:33 PM:953

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.1.9806-to-3.1.1.9835-enUS-patch.exe
23/11/2009 2:54:34 PM:109

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.1.9835-to-3.1.2.9901-enUS-downloader.exe
23/11/2009 2:54:34 PM:203

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.1.9835-to-3.1.2.9901-enUS-patch.exe
23/11/2009 2:54:34 PM:375

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.2.9901-to-3.1.3.9947-enUS-downloader.exe
23/11/2009 2:54:34 PM:500

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.1.2.9901-to-3.1.3.9947-enUS-patch.exe
23/11/2009 2:54:34 PM:625

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-downloader.exe
23/11/2009 2:54:34 PM:718

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-patch.exe
23/11/2009 2:54:34 PM:890

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe
23/11/2009 2:54:35 PM:0

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-patch.exe
23/11/2009 2:54:35 PM:171

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-downloader.exe
23/11/2009 2:54:35 PM:421

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-patch.exe
23/11/2009 2:54:35 PM:781

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\Wow.exe
23/11/2009 2:54:35 PM:984

Threat Name - Hidden Files
Type - File
Risk Level - High
Infection - F:\Program Files\World of Warcraft\WowError.exe

[AChen]

The info has been passed on to the MRC team to investigate. Will get back to you shortly.

[GunShip03]

There have been four updates since I posted this way hasn't this been fixed?

[AChen]

There have been four updates since I posted this way hasn't this been fixed?

We've installed WOW and gave this a test, but SD did not detect any files. Is it possible that you zip up 1 or 2 of the files being detected and attach it with your next reply?

From what you have provided above, it seems SD has detected 41 hidden files. WOW should not have any hidden files from what we can see.

[GunShip03]

Ok here are some of the files. What version of WoW did you install, was it just WoW without its two expansion packs and did you patch it?

[salvinni]

I am having same problem.
My spyware doctor attempts to fix the problem by deleting or quarintineing
mentioned files.
Then i cant log into wow, my laucher is wiped and so r rest of files.
I have to reload the installer and patches.
When i get to 3.2, 10% in, it freezes my system.
This is probably when these files r being installed.
So i let systm sit for like 10 mins to see what the prob was, error popped up about pc tools spyware doctor.
My fix , I shutdown my spyware and started the download over again, this time w/ no probs.
Back in game , this lasts for about a week, then poof!, launcher gone again, along w/ all files mentioned above.
Im on my 5th week of this.
Need a fix please.
My only other option is just cancel this spyware and get another.

[AChen]

Thanks for the files. We will analyze these today and will get back to you asap.

[AChen]

Is the World of Warcraft directory (c:\program files\World of Warcraft\) hidden? and does it always stay hidden?

[GunShip03]

No the World of Warcraft directory is not hidden.

[AChen]

One other thing I forgot to mention:
What OS are you running on?
Are you using any folder or password protection software? (eg, DesktopSafe or something similar)
Is this the latest version of WOW with the latest Patch?
Do you have any other security apps installed?