Every time I open my game, PC Tools Spyware Doctor sees Scan.dll as a RogueSpyware and closes it. My game still runs fine, don't know what the file does. Why is it saying that, and will it be fine if I allow it?

C:\Program Files\World of Warcraft\Scan.dll

I actually did a full system scan after applying patch 2.4 on my Sub PC. I run WoW on both of my Machines but only got a Virus warning for the same thing on my Sub (old) PC. So I did a full system scan and the Scan.dll{trj] Neptuina was found in multiple Directories, including 2 in the Warcraft Directory, 1 in my Windows Account Directory, and 2 in the System Restore Snapshot files. Everytime it came up I moved the file to the Virus chest and deleted it with no issues but it still seems Kinda Fishy to me. But on my Regular PC during the update install using the same Anti Virus protection it was not found as a Virus.

IM still unsure why this is happening and its kinda freaky to know that there's a potential Virus or maybe even some sort of logger in the WoW Directory.

Avast! antivirus is also blocking scan.dll saying it's a win32 trojan.

I read the above posts and not worried, but figured I'd post this anyway...

File name: C:\Program Files\Wolrd of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen{Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008

---

Q u o t e:
I read the above posts and not worried, but figured I'd post this anyway...

File name: C:\Program Files\Wolrd of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen{Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008

---

I have the same issue, and I'm extra worried because I clicked a keylogger link (although my AV notified me and closed the connection), but I don't want to go on without fixing this.

Call me paranoid, but it IS a little strange that it never did this before; just started doing it today - on patch day - even though it's very unlikely that a Blizzard server became infected, it IS possible - please at least take a few minutes to check into this ASAP Blizzard... I find it sort of Ironic that scan.dll is coming up as a Trojan shortly after the Zombie thing started in game. Thanks.

Also strange this thread goes back to 2007, but I've never had a problem with scan.dll up until today...

I'm getting the same avast message, so we're 100% sure it's safe? I don't want my account info keylogged and stolen.

"avast! Warning

A Virus Was Found!

There is no reason to panic, though. Try to follow the given advice and links. If your computer is part of a network, unplug the network cable to avoid further spreading of the infection.

File name: C:\Program Files\World of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen {Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008
"

---

Q u o t e:
I'm getting the same avast message, so we're 100% sure it's safe? I don't want my account info keylogged and stolen.

"avast! Warning

A Virus Was Found!

There is no reason to panic, though. Try to follow the given advice and links. If your computer is part of a network, unplug the network cable to avoid further spreading of the infection.

File name: C:\Program Files\World of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen {Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008
"

---

There is no infection read the stick blizzard provided please.

Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.

---

Q u o t e:
Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.

---

Wuts happening is your Antivirus is deleting a portion of the scan.dll file and when you rerun the launcher it downloads a file called scan.dll.new to replaced the dmged file scal.dll to run and work properly. Problem is scan.dll.new is the exact same file as scan.dll with an added extention so wow knows to run it. And since its the same file it triggers the event again. Best bet is to just run wow.exe or disable your av to play wow but it is 100% safe.

---

Q u o t e:
Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.

---

.new shows up if you've quarantined scan.dll..... Wow needs scan.dll to run, so it downloads a NEW copy from the wow servers.

I'm getting the exact same Virus Warning from Avast as the previous posters - this is for the file scan.dll.new as of today 10/28/08.

I have sent the file to Avast - I'll let THEM tell me it's a false positive.

Avast also started detect scan.dll as a trojan just today every time wow starts up. Either the virus scanners changed or blizzard changed scan.dll

Same problem here. I reckon I'll wait for a blue post or a comment from Avast on the issue before I start allowing this file to stay in that directory.

---

Q u o t e:
Same problem here. I reckon I'll wait for a blue post or a comment from Avast on the issue before I start allowing this file to stay in that directory.

---

Scan.dll is wow's warden/trojan checker.

If you want to run wow you have to have scan.dll

We've already verified its a false positive. Update your virus definitions & it'll stop flagging it as an infection. Its not.

Blizzard, this is a mistake on your part, and I hope you fix it immediately. I am one of (I'm reasonably certain) a large number of customers that will not bypass my security software just because you say it isn't spyware or malware.

There are other ways to gather hardware information, namely with permission of your customers.

---

Q u o t e:
Blizzard, this is a mistake on your part, and I hope you fix it immediately. I am one of (I'm reasonably certain) a large number of customers that will not bypass my security software just because you say it isn't spyware or malware.

There are other ways to gather hardware information, namely with permission of your customers.

---

This isn't a blizzard issue.. >.<

This is Avast thinking part of the wow files are viruses.. They're not. They're safe. Update your definitions & you won't get this issue anymore.