Saturday, March 28, 2009

Scandalous.

When we thought Cuteworm (CW) was coming clean, another incident happened.
Do you remember a period of time when CW started using a timer and started spamming about his website having the latest 1.23a Warcraft III patch?
Yeah, that's when the incident started.

Apparently, various Zion users have fell victim to the patch scam.
So to the best of my knowledge, here's what I think happens when you use his patches.

Chain of events

  1. It installs 1.23a (The only thing good about it :( ).

  2. While it does that, the installer supposedly installs/overrides/adds components to the host system file. More information about that file go to http://en.wikipedia.org/wiki/Hosts_file.

  3. You will then experience the following:

    • Unable to go to sites like: Zincplay.com, Dotapod.com, Garena.com, Battle.net

    • You'll be unable to get into Zion or #Zinc



  4. Congratulations, you've gotten CW's "virus"! :(


This "virus" is more like just altering certain important files. Antiviruses (AV) don't detect the problem since it doesn't do anything malicious to the actual computer itself. AV usually detects viruses that try to alter system files so that it can infect other computers and other various reasons.

In CW's case, however, it is just an installer changing a file. It being the hosts file, it actually stops you from connecting to the various websites entered inside. So technically, your own computer is doing all the work and there is actually no virus at all. This is the reason why it isn't tagged as a virus but just your everyday installer. Wicked huh?

So anyway, don't fret if you've patched using his patcher. Here are the solutions/discussions!
http://www.dotapod.com/thread-5217-1-1.html
http://forums.dota-allstars.com/index.php?showtopic=275365
http://www.sgclub.com/singapore/cuteworm_com_warcraft_144160.html
Forgive the vulgarities. The guy is really furious LOL.

I hoped they help.
Anyway, just to let you know that you can't actually download the patch as of now since it looks like Cuteworm just made his site totally a google ad. Maybe he's in an attempt to earn money? LOL. I mean if you got a "virus" from that site, don't you want to head there immediately? Google adsense + rush to site = instant ca$h!

If you need help for a friend (cause if you're infected, you obviously can't come to this site) and you don't understand the solutions, comment this post. Please for god sake, don't comment without reading.

No comments:

Post a Comment