World of Warcraft

  • Blizzard Response
  • Locked Thread
  •  Topic Scan.dll
  •   |  02/09/2010 10:00:35 PM PST 
1 . 2 . 3
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 0. Scan.dll   11/16/2007 03:20:28 PM PST
quote locked
Every time I open my game, PC Tools Spyware Doctor sees Scan.dll as a RogueSpyware and closes it. My game still runs fine, don't know what the file does. Why is it saying that, and will it be fine if I allow it?

C:\Program Files\World of Warcraft\Scan.dll
Blizzard Entertainment
View All Posts by This User ignore-inactive
Datth
Blizzard Poster
  • 1. Re: Scan.dll   11/16/2007 03:34:27 PM PST
quote locked
Hi Harrown,

I believe this file is used to collect system specs to help us figure out what type of hardware is out there. The result would be something like this but only the developers can see it - http://www.steampowered.com/status/survey.html

Technical Support

Who am I? a) death | b) daath | c) darth | d) dattth | e) NOTA
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 2. Re: Scan.dll   05/26/2008 03:49:55 PM PDT
quote locked
I actually did a full system scan after applying patch 2.4 on my Sub PC. I run WoW on both of my Machines but only got a Virus warning for the same thing on my Sub (old) PC. So I did a full system scan and the Scan.dll{trj] Neptuina was found in multiple Directories, including 2 in the Warcraft Directory, 1 in my Windows Account Directory, and 2 in the System Restore Snapshot files. Everytime it came up I moved the file to the Virus chest and deleted it with no issues but it still seems Kinda Fishy to me. But on my Regular PC during the update install using the same Anti Virus protection it was not found as a Virus.

IM still unsure why this is happening and its kinda freaky to know that there's a potential Virus or maybe even some sort of logger in the WoW Directory.
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 3. Re: Scan.dll   10/28/2008 10:14:52 AM PDT
quote locked
Avast! antivirus is also blocking scan.dll saying it's a win32 trojan.
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 5. Re: Scan.dll   10/28/2008 10:18:07 AM PDT
quote locked
I read the above posts and not worried, but figured I'd post this anyway...

File name: C:\Program Files\Wolrd of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen{Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008
80
View All Posts by This User Toggle Ignore / Unignore This User
  • Emerald Dream
  • 6. Re: Scan.dll   10/28/2008 10:19:54 AM PDT
quote locked

Q u o t e:
I read the above posts and not worried, but figured I'd post this anyway...

File name: C:\Program Files\Wolrd of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen{Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008



I have the same issue, and I'm extra worried because I clicked a keylogger link (although my AV notified me and closed the connection), but I don't want to go on without fixing this.
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 7. Re: Scan.dll   10/28/2008 10:27:28 AM PDT
quote locked
Call me paranoid, but it IS a little strange that it never did this before; just started doing it today - on patch day - even though it's very unlikely that a Blizzard server became infected, it IS possible - please at least take a few minutes to check into this ASAP Blizzard... I find it sort of Ironic that scan.dll is coming up as a Trojan shortly after the Zombie thing started in game. Thanks.
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 8. Re: Scan.dll   10/28/2008 10:30:11 AM PDT
quote locked
Also strange this thread goes back to 2007, but I've never had a problem with scan.dll up until today...
70
View All Posts by This User Toggle Ignore / Unignore This User
  • Stormreaver
  • 9. Re: Scan.dll   10/28/2008 10:34:36 AM PDT
quote locked
I'm getting the same avast message, so we're 100% sure it's safe? I don't want my account info keylogged and stolen.

"avast! Warning

A Virus Was Found!

There is no reason to panic, though. Try to follow the given advice and links. If your computer is part of a network, unplug the network cable to avoid further spreading of the infection.

File name: C:\Program Files\World of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen {Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008
"
70
View All Posts by This User Toggle Ignore / Unignore This User
  • Bleeding Hollow
  • 10. Re: Scan.dll   10/28/2008 10:38:31 AM PDT
quote locked

Q u o t e:
I'm getting the same avast message, so we're 100% sure it's safe? I don't want my account info keylogged and stolen.

"avast! Warning

A Virus Was Found!

There is no reason to panic, though. Try to follow the given advice and links. If your computer is part of a network, unplug the network cable to avoid further spreading of the infection.

File name: C:\Program Files\World of Warcraft\Scan.dll.new
Malware name: Win32:Trojan-gen {Other}
Malware type: Virus/Worm
VPS version: 081028-0, 10/28/2008
"


There is no infection read the stick blizzard provided please.
62
View All Posts by This User Toggle Ignore / Unignore This User
  • Cenarius
  • 11. Re: Scan.dll   10/28/2008 10:39:43 AM PDT
quote locked
Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.
70
View All Posts by This User Toggle Ignore / Unignore This User
  • Bleeding Hollow
  • 12. Re: Scan.dll   10/28/2008 10:43:43 AM PDT
quote locked

Q u o t e:
Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.


Wuts happening is your Antivirus is deleting a portion of the scan.dll file and when you rerun the launcher it downloads a file called scan.dll.new to replaced the dmged file scal.dll to run and work properly. Problem is scan.dll.new is the exact same file as scan.dll with an added extention so wow knows to run it. And since its the same file it triggers the event again. Best bet is to just run wow.exe or disable your av to play wow but it is 100% safe.
80
View All Posts by This User Toggle Ignore / Unignore This User
  • 13. Re: Scan.dll   10/28/2008 10:44:19 AM PDT
quote locked

Q u o t e:
Only just today did Avast pick this up as a virus, not 12 hours ago, not last week or last year.

The full path and filename is:

C:\Users\Kevin\AppData\Local\VirtualStore\Program Files\World of Warcraft\Scan.dll.new

Scan.dll.NEW!!!

I would like a blue response to the '*.*.new' naming of this file before I take any action as it's known to me that new viruses are often camouflaged with familiar safe file names.

Thank you.


.new shows up if you've quarantined scan.dll..... Wow needs scan.dll to run, so it downloads a NEW copy from the wow servers.


Q u o t e:
It's all about the sex leg now.
- Datth
80
View All Posts by This User Toggle Ignore / Unignore This User
  • 14. Re: Scan.dll   10/28/2008 10:49:49 AM PDT
quote locked
I'm getting the exact same Virus Warning from Avast as the previous posters - this is for the file scan.dll.new as of today 10/28/08.

I have sent the file to Avast - I'll let THEM tell me it's a false positive.
80
View All Posts by This User Toggle Ignore / Unignore This User
  • 15. Re: Scan.dll   10/28/2008 10:51:53 AM PDT
quote locked
Avast also started detect scan.dll as a trojan just today every time wow starts up. Either the virus scanners changed or blizzard changed scan.dll

CLANK.CLANK.CLANK.CLANK.CLANK.CLANK.CLANK.CLANK.
(the sound of a prot warrior?)
70
View All Posts by This User Toggle Ignore / Unignore This User
  • Area 52
  • 16. Re: Scan.dll   10/28/2008 10:57:42 AM PDT
quote locked
Same problem here. I reckon I'll wait for a blue post or a comment from Avast on the issue before I start allowing this file to stay in that directory.
80
View All Posts by This User Toggle Ignore / Unignore This User
  • 17. Re: Scan.dll   10/28/2008 10:58:57 AM PDT
quote locked

Q u o t e:
Same problem here. I reckon I'll wait for a blue post or a comment from Avast on the issue before I start allowing this file to stay in that directory.


Scan.dll is wow's warden/trojan checker.

If you want to run wow you have to have scan.dll

We've already verified its a false positive. Update your virus definitions & it'll stop flagging it as an infection. Its not.


Q u o t e:
It's all about the sex leg now.
- Datth
70
View All Posts by This User Toggle Ignore / Unignore This User
  • 18. Re: Scan.dll   10/28/2008 11:02:46 AM PDT
quote locked
Blizzard, this is a mistake on your part, and I hope you fix it immediately. I am one of (I'm reasonably certain) a large number of customers that will not bypass my security software just because you say it isn't spyware or malware.

There are other ways to gather hardware information, namely with permission of your customers.
80
View All Posts by This User Toggle Ignore / Unignore This User
  • 19. Re: Scan.dll   10/28/2008 11:03:31 AM PDT
quote locked

Q u o t e:
Blizzard, this is a mistake on your part, and I hope you fix it immediately. I am one of (I'm reasonably certain) a large number of customers that will not bypass my security software just because you say it isn't spyware or malware.

There are other ways to gather hardware information, namely with permission of your customers.


This isn't a blizzard issue.. >.<

This is Avast thinking part of the wow files are viruses.. They're not. They're safe. Update your definitions & you won't get this issue anymore.


Q u o t e:
It's all about the sex leg now.
- Datth
1 . 2 . 3
Forum Nav : Jump To This Forum
Blizzard Entertainment