Downloading is a bit of a chore since you have to. Most programmers cannot do UI very well and I think this falls squarely into that category. First impressions are that this is definitely both a website and addon designed by a programmer. Many of the popular AddOn hosting websites and AddOn author sites (such as DeadlyBossMods) are being represented by the fake websites. Last but not least, I came across WoWMatrix, which has clients for Windows, Mac, and Linux. Anyone know why this is is wowmatrix untrustable Reply With Quote. This is a company hosting 14 websites that are all being used to distribute this keylogger. my McAfee virus protection caught a trojan, said to have come from wowmatrix. Update (3PM PST): This spans well beyond the fake website listed below, sadly. This Trojan (Malware.NSPack) can currently be detected by Malware Bytes. going to WoWMatrix will not harm your computer but searching for WoWMatrix on google will result in fake paid advertised site to show before the real one. you see fake) of the WowMatrix AddOn Manager which installs the emcor.dll. This is not WoWMatrix causing this but a fake website and has no relation whatsoever. It's unclear whether or not the majority of virus scanners detect it at the moment. Once downloaded, this will install the trojan Malware.NSPack which can be detected by Malware Bytes. We've sent an email to Google to alert them of this keylogger-spreading website and their advertisement. Visiting this website - which is an exact copy of the WoWMatrix site - lets you download a fake version of the WoWMatrix AddOn Manager which allows emcor.dll to be installed on your system. I've attached an image below, but DO NOT VISIT THE WEBSITE under any circumstances. One of the sources is a fake WoWMatrix website being advertised on Google at the top of search results for WoWMatrix as a "Sponsored Link". Upon arriving at the fake WoWMatrix site, the visitor can then download a version of WoWMatrix which has the initial attack, emcor.dll, packaged with it.
0 Comments
Leave a Reply. |