Malicious copy of Rawr being spread.

Topics: Off-Topic
Mar 14, 2010 at 4:57 PM

Just saw earlier today that someone has started spreading malicious copies of Rawr through the WoW forums(e.g. http://forums.wow-europe.com/thread.html?topicId=12899880685&sid=1) the malware itself is embedded in the main executable base-64 encoded, i don't know exactly what it does, i couldn't be bothered making a VM sandbox, but the scan results are here: http://www.virustotal.com/analisis/535c57286fbec99c36438b6bfc1ed85d0d7e9dc20d29de22243f82ad37ef2532-1268575061

The malicious copy is hosted on mediafire, and they've shamelessly ripped the youtube video and reuploaded here: http://www.youtube.com/watch?v=HfYiZ8J5Oug

I thought i would make you aware of this, i don't know what you can do, but possibly the community will be warned as well :)

Coordinator
Mar 14, 2010 at 5:38 PM
Please report any posts/youtube videos that you see like that. It's not the first time, and probably won't be the last time, that a virus has posed as Rawr.
Mar 14, 2010 at 6:01 PM
Astrylian wrote:
Please report any posts/youtube videos that you see like that. It's not the first time, and probably won't be the last time, that a virus has posed as Rawr.

Ah ok, was the first time i've seen one, even one where the malicious poster tried to argue it wasn't malware :P

Already flagged it on youtube, so will keep that in mind the next time.