trojan i got....

[bonra]

I downloaded that new patch this morning and this afternoon I did a virus scan and found: trojan horse psw.generic4.tuv
object path: c:\world of warcraft\
object name: WoW-2.1.0.6729-to-2.1.1.6739-enUS-downloader.exe

Is it possible I got this from blizzard? Strange coincidence?

[Kalos]

Where did you download it from? I'm willing to bet it wasn't the offical Blizzard Downloader. Some mirror sites are dodgy and untrustworthy, and insert trojans like this very one into the patching executable. Mirror sites are faster, but make sure you use a good one, else infections can be smuggled in after being put in place and hosted by the third party. Blizzard themselves would have no need to jeopordise their reputation for petty data mining activities through planting trojans in thier own software. That, and we would be seeing far, far more reports of this trojan popping up associated with this patch if it were a common feature of the mainstream release by Blizzard.

[bonra]

All I did was go to load wow this morning and up popped the usual dl they have on some tuesdays, did't go to any sites it was straight from the game.

Also my friend did a scan and found no viruses, then they loaded wow got the same update ran another scan and found 3 viruses.

[Kalos]

By through the game, you are referring to the Blizzard Downloader? Is this the first time you've played since June 4th? 2.1.1.6739 is over two weeks old and should have been loaded up before now, there's no reason for anything to be loading today, unless there's been a huge gap where you and your friend have not been playing June 5th onwards, where you wouldn't have been able to connect to the WoW servers without the current patch surely?

What is this scanner being used to detect the infections, and what where thier names?

[bonra]

Yes it was the blizzard downloader and so far I have talked to 4 people that today when they went to load wow they got the blizzard downloader that was about 40mb. And they all play daily.

[Tanitha]

False positive according to Blizzard. They recommend updating your AV definitions and running through it here. Thread on the EU forums regarding this can be found here (http://forums.wow-europe.com/thread.html?topicId=296371410&sid=1).