Hi,

I'm not sure if this is the correct place to post this or not.  Apologies if it isn't but I'm in a rush to get out the door, spank me later if you must.

Anyways, currently I have AVG free and comodo firewall in place on my pc, comodo is set to safe mode. I visited curse last night on firefox (my only browser) to check a buttonfacade addon, and within 30 seconds comodo firewall popped up "Firefox is attempting to execute B.exe", not knowing what it was I googled it and up came reports of trojans. Program was blocked and I did a full scan of my system with various scanners.

After using kaspersky, hijackthis, spybot and avg, nothing came up on scans and I deleted the b.exe I found in C:\Documentsandsettings\*Username*\ApplicationData\. Went back to curse this morning checking up on a pally buff addon, i didnt click to download anything only open a page, however within the space of a few seconds of opening the addon page on the search results list, the same comodo warning came up.

Same results as before, program blocked and deleted, no evidence yadyada. Has anyone else had the same?

Wow this is crazy, this stuff was reported last week on World of Raids...I actually got a trojan that comodo didn't pick up and got hacked. I have switched to avg and zone alarm with spybot and adaware and I am finding nothing atm. This seems to be a real security issue around here, hopefully it can get resolved.

By the way, keep an eye out for A.exe, B.exe, C.exe, and the 6to4ex.dll

I'm seeing

Scan type:  Auto-Protect Scan
Event:  Threat Found!
Threat: Trojan.Malscript!html

on WoW's decursive add on page, appears to me to be a advert doing it.

http://wow.curse.com/forums/t/110189.aspx?PageIndex=2