|
Originally Posted by Cairenn
What you need to do
If you downloaded either of those files and think you may have been infected, here is what you need to do:
1) Boot into safe mode
2) Delete the bad files (wzcsvbc.dll, mouse.dll, printfpool.exe)
Start --> run --> cmd.exe
Copy and paste the following lines into the box, one by one:
attrib -H -S %systemroot%\system32\wzcsvbc.dll
attrib -H -S %systemroot%\system32\mouse.dll
attrib -H -S %systemroot%\system32\printfpool.exe
del %systemroot%\system32\wzcsvbc.dll
del %systemroot%\system32\mouse.dll
del %systemroot%\system32\printfpool.exe
sc delete printfpool
exit
3) Fix the registry
Start --> run --> regedit
Navigate to My Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC\Parameters
Double-click on "ServiceDLL" and change that value to "%SystemRoot%\System32\wzcsvc.dll" (remove the "b")
4) Reboot
5) Start WoW, and then close it. Do NOT log in.
6) Verify that the bad files don't exist(search your computer for "wzcsvbc.dll" - be sure to search in hidden and system folders)
7) Run a complete anti-virus scan. AntiVir (http://freeav.com) has been known to successfully detect these files.
8) Login to the WoW account management (http://www.worldofwarcraft.com/account/) and change your password.- NOTE: VERY FEW ANTIVIRUS PROGRAMS CURRENTLY PICK THIS TROJAN UP. BE SAFE, SCAN YOUR SYSTEM, BUT VERIFY BY HAND THAT THE BAD FILES NO LONGER EXIST.
What we are doing about this:
.
|
We have tried this solution and it hasn't worked for us.
Issue I had encountered:
* When we went into the reg edit that it wouldn't delete the "b" in wzxsvbc.dll
I plan to try to use the AnitiVir website to remove the trojan. Will this resolve my issue and will my account be reletivently safe or do I need to go forward with having Blizz shut my account down?