• Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Avast-File reputation warning - Scan.dll from wow

    Discussion in 'Honorbuddy Forum' started by c4ypt0psy, Nov 8, 2013.

    1. c4ypt0psy

      c4ypt0psy New Member

      Joined:
      Oct 18, 2013
      Messages:
      6
      Likes Received:
      0
      Trophy Points:
      0
      hi folks

      This is what i got when i opened wow this evening.

      I did open wow this morning etc.. never got this message from Avast.

      Could it be a background file that blizz updated to scan processes etc?
      idk im not much of a code wize kinda guy ,..but hey i kinda found it suspicious.
      Im kinda scared to start HB at this point.


      Can anyone shed a light on this ?

      dafuq.jpg
       
    2. Crowley

      Crowley Member

      Joined:
      Jan 15, 2010
      Messages:
      967
      Likes Received:
      20
      Trophy Points:
      18
      Hmmm, that is wierd. I use Avast IS and don't get/haven't had that message.
      Nothing else constructive to say beyond i don't get that message :( I fired up wow after reading it and no message.
       
    3. Corleone

      Corleone Well-Known Member

      Joined:
      May 24, 2013
      Messages:
      2,255
      Likes Received:
      28
      Trophy Points:
      48
      Thanks, read enough. ^^

      Avast is best to throw away... high and far.
       
    4. CodenameG

      CodenameG New Member

      Joined:
      Jan 15, 2010
      Messages:
      38,369
      Likes Received:
      231
      Trophy Points:
      0
      its just downloading new files, wow and its utilities do that all the time.
       
    5. c4ypt0psy

      c4ypt0psy New Member

      Joined:
      Oct 18, 2013
      Messages:
      6
      Likes Received:
      0
      Trophy Points:
      0
      THanks for the reply's, i did a little bit of research after finding this and sharing it for the rest of the community in case this happens to anyone else.

      There is only a fiew AV that detects this, Avast behing one of them.


      (Post regarding Glider on other website)
      (((Reverse engineered Scan.dll file, by SaFxZ./AFRAiD)))

      The whole purpose of this release is to circumvent the error message, and possible account/IP flagging of World of Warcraft.

      Been using this for myself for a while now, thought it would be a good one to release to the public now.

      According to my small research, WoW can (ofcourse) not flag your account, but they can flag your MAC/IP/HDD GUID and ban it from WoW. A MAC/GUID ban is what we call a hardware ban, and prevents you from playing WoW on the specific machine you were banned on, and and IP ban.. well, bans your IP. This can be worked around by a single phone call to your ISP though.

      So, why change Scan.dll?
      Good question. Scan.dll runs when you launch WoW, and it scans your memory for trojans, keyloggers etcetera, but also for bots. We're okay with it finding keyloggers, trojans etc, but we don't want it to find our bots.
      Therefore we keep the actual file in-tact, but make the part where it should scan for bots unreadable, by placing zero's.

      Does WoW update it's Scan.dll?
      They do in fact. On every boot, WoW initializes the following:
      Launcher -> Scan using Scan.dll -> Update Scan/Warden/WoW
      But, with our custom Scan file, it shouldn't be finding Glider!

      Is this undetected?
      Yes, it is. I've been using it for roughly two weeks now, launched Glider before launching WoW, and have had no problems whatsoever. But, be aware that they may (hot)fix this at any time.

      Will this get me banned?
      No, it's highly unlikely. Although Blizzard may change it's policy regarding modification of game files later on.

      As always, use at your own risk!
       
    6. swgplaya09

      swgplaya09 Member

      Joined:
      Sep 12, 2012
      Messages:
      332
      Likes Received:
      1
      Trophy Points:
      18
      Avast?!?! /cry
       
    7. webhond

      webhond TEMPORARILY MUTED

      Joined:
      May 23, 2011
      Messages:
      2,471
      Likes Received:
      19
      Trophy Points:
      0
      avast?

      stopped reading right after.

      No protection is even better then that shizzlefrizzledizzle.
       
    8. swgplaya09

      swgplaya09 Member

      Joined:
      Sep 12, 2012
      Messages:
      332
      Likes Received:
      1
      Trophy Points:
      18
      Taking a magnet to your harddrive would protect the information on it more than avast.
       
    9. kodak1955

      kodak1955 New Member

      Joined:
      Sep 27, 2013
      Messages:
      35
      Likes Received:
      0
      Trophy Points:
      0
      I got that message everyday and i just abort and wow work fine
       

    Share This Page