Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 8:53pm
   Mischel Internet Security Forum
   TrojanHunter
   TrojanHunter Scanner (Moderators: Helena, Gavin_Coe, Magnus)
   wow keylogger virus		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: wow keylogger virus  (Read 3976 times)
linjon
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 35
wow keylogger virus
« on: Sep 18th, 2006, 3:08pm »		 Quote Quote  Modify Modify
I emailed 2 keylogger viruses, svchsc-exe and svch0st-exe, which are rampant on the world of warcraft fan forums. 1 or both stole my login and my acct was ripped off. I'm a little gunshy now. has trojanhunter been updated to cover these. Will thguard pick them up?
thanks
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: wow keylogger virus
« Reply #1 on: Sep 18th, 2006, 4:35pm »		 Quote Quote  Modify Modify
When did you submit these two files?  I'll email Gavin and ask him to read this post.  He's the analyst/guru on this.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
linjon
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 35
Re: wow keylogger virus
« Reply #2 on: Sep 18th, 2006, 9:33pm »		 Quote Quote  Modify Modify
saturday. I sent a message about them and someone  asked me to send them
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Gender: male
 Posts: 2113
Re: wow keylogger virus
« Reply #3 on: Sep 20th, 2006, 12:32am »		 Quote Quote  Modify Modify
Hi, yes I remember them and THGuard detects those and hundreds of other WOW type of trojans.
IP Logged
linjon
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 35
Re: wow keylogger virus
« Reply #4 on: Sep 20th, 2006, 8:50am »		 Quote Quote  Modify Modify
reallyHuh?
 
So that explains why i got ntdetect-exe, g0ld-com, svch0st-running on task manager, svchcs-exe- running in task manager, and now ntldr-exe, all while running thguard in the background.
 
uh-huh...ok
 
so i guess i have nothing to worry about...
 
 
do i sound pissed??
 
I guess i am
 
 
Posted on: Today at 12:32am  
Hi, yes I remember them and THGuard detects those and hundreds of other WOW type of trojans  
 
 
No, it doesn't.
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: wow keylogger virus
« Reply #5 on: Sep 20th, 2006, 9:32am »		 Quote Quote  Modify Modify
Do you have ALL the options selected in THGuard settings, particularly the "Scan all Modules" and "Automatically remove Trojans" ?
 
What happens(gets detected) if you do a FULL scan with TH scanner?
« Last Edit: Sep 20th, 2006, 9:33am by siliconman01 » IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
linjon
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 35
Re: wow keylogger virus
« Reply #6 on: Sep 20th, 2006, 12:16pm »		 Quote Quote  Modify Modify
SCAN ALL MODULES WAS CHECKED, not automatic removal. I'm sorry, but trojan hunter ( updated) did NOT detect ndetect-exe, nor nlrtr, nor svch0st,.
 
I don't know what to tell you.
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4120
Re: wow keylogger virus
« Reply #7 on: Sep 20th, 2006, 3:25pm »		 Quote Quote  Modify Modify
Hi,
 
I have added detection for this new variant. Please run LiveUpdate and then a full scan with TrojanHunter. It should clear them out.
 
If you need detailed removal instructions, or assistance in removing, please email me at support(at)misec.net
IP Logged
linjon
Newbie
*



I love YaBB 1G - SP1!

   


Posts: 35
Re: wow keylogger virus
« Reply #8 on: Sep 21st, 2006, 11:09am »		 Quote Quote  Modify Modify
new version works great!
 
Sorry for bring cranky....
 
I will always remember how much assistance I received here, a couple of years ago, when i had downloaded a FREE trial of TH.
I had cleaned my laptop but aborted the procedure halfway thru, and ended up locking me out of windoze.
IP Logged
redwolfe_98
Veteran
*****





   
Email

Gender: male
 Posts: 560
Re: wow keylogger virus
« Reply #9 on: Sep 22nd, 2006, 12:02am »		 Quote Quote  Modify Modify
linjon, i would like to know what the url is for the "world of warcraft fan forums" is which you say is "loaded with trojans".. i did a google-search for "world of warcraft" fan forum" but there were several of those, so i don't know which one you were referring to..  
 
it should be OK to post the link as long as you fix it to where it will not function as a hyperlink.. usually i have seen that done by replacing "http://.." with "hxxp://.."..
IP Logged
Gavin_Coe
Trojan Analyst
*****





   
WWW  

Gender: male
 Posts: 2113
Re: wow keylogger virus
« Reply #10 on: Sep 22nd, 2006, 11:50am »		 Quote Quote  Modify Modify
Hi, thanks for confirming.. I must have been mistaken Embarassed
IP Logged
glenn6788
Newbie
*





   


Posts: 1
Re: wow keylogger virus
« Reply #11 on: Oct 15th, 2007, 8:28pm »		 Quote Quote  Modify Modify
the website is http://forums.worldofwarcraft.com
 
i also think i got a keylogger from their, but still havent detected it after running 5 different anti virus programs including the latest THguard
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: wow keylogger virus
« Reply #12 on: Oct 16th, 2007, 12:29am »		 Quote Quote  Modify Modify
Welcome to the forum glenn6788  Wink
 
I assume that you are running the latest trial version of TrojanHunter, V5.0.961?
 
Please:
 
1.  Be sure that you have the latest rulesets for detection.  If you are running the trial version of TH, you can manually update via the link below.
 
http://www.misec.net/trojanhunter/updating/
 
2.  Reboot into SAFE MODE
 
3.  Run a full scan of your computer with TrojanHunter scanner.  Let it clean what it finds/detects.
 
4.  Reboot back into Normal Mode.
 
5.  Download/Install Hijackthis via the link below.
 
http://www.misec.net/forum/board/FAQ/1163329424
 
6.  Run a quick Hijackthis scan and post a log of the scan back here please.  
 
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register