Fake version of the Curse Client will install a Trojan malware that will steal your World of Warcraft account info. Players have been warned by Blizzard to be on the lookout for a dangerous Trojan which acts in real time.
Don't forget to like us on FACEBOOK, thanks so much!
According to Blizzard, this latest piece of malware acts in real time by stealing World of Warcraft account information along with the authenticator password. The top subscription-based MMO out there is a great target for cyber criminals. Over 76 million subscribers have played the game since the end of September 2013.
Those affected by the recent Trojan can manually remove the pest from their computer. It is built into a fake version of the Curse Client that is downloaded from a dodgy version of the Curse Website. To see if you have this Trojan on your computer follow the steps.
Create MSInfo file
1. Press Windows Key and R key
2. Type MSInfo32 and hit Enter
3. Once MSInfo Windows is open, click File menu and Export.
4. Choose the location where you want to export the file. Desktop works as well as any other.
5. When prompted, name the file “MSInfo” and then click Save.
Open the MSInfo text file and look for either “Disker” or “Disker64”. This will be located in the Startup Program section of the file.
If you can see something similar to:
Disker rundll32.exe c:\users\name\appdata\local\temp\w_win.dll,dw Name-PC\Name Startup
Disker64 rundll32.exe c:\users\name\appdata\local\temp\w_64.dll,dw Name-PC\Name Startup
Than you have the Disker malware and you should take the action and remove it from your computer. To do this manually simply do the steps we described for removing Cryptolocker. The fourth step will be different as this is a different malwars, but just search for Disker references inside the Registry and remove those.
Blizzard posted an update on how to deal with the Disker and what do to if your World of Warcraft account has been hacked.
Dolores is SEO and Digital Marketing consultant who has been completely hog-washed into doing this site by KC.