TrojanDropper:Win32/Fedripto.A

The TrojanDropper:Win32/Fedripto.A Trojan has made recent headlines, as TrojanDropper:Win32/Fedripto.A has started targeting players of the popular Massively Multiplayer Online Role-Playing Game (MMORPG) World of Warcraft. Millions of subscribers play World of Warcraft, forming a community with its own economy based on trading in-game gold and items. There is also a very profitable real-world business associated with this economy, concerned with selling high level characters, World of Warcraft Accounts containing rare items and trading real-world money for in-game gold. While Blizzard, the makers of World of Warcraft have done a pretty good job of keeping malware out of their game, you can always count on criminals and hackers to take advantage of every possible security loophole. ESG security researchers warn World of Warcraft players to be on the lookout for a scam involving in-game item trading. It is important to understand that Blizzard does not authorize any real-world trading of World of Warcraft gold, items or accounts. If you choose to engage in this practice, you are actually violating your account's terms of agreement and, apart from putting yourself at risk for scams, are also at risk of being banned from World of Warcraft.

The TrojanDropper:Win32/Fedripto.A Trojan World of Warcraft Scam

There are unscrupulous people within the World of Warcraft in game economy, just as with real-world trading. This is why it has become standard practice to ask for a screenshot of the item being traded, before starting the transaction. For example, imagine that you will be trading a particularly rare mount with another player. That other player may first ask you to take a picture of the screen showing that you effectively own this rare mount and that it is not soulbound (this is a World of Warcraft term referring to items that cannot be traded.) Once the other player is satisfied that you effectively own the item in question and that it can be traded, then the trade may take place. A criminal takes advantage of this practice, by sending a hidden executable file containing the TrojanDropper:Win32/Fedripto.A Trojan, instead of an image file containing the screenshot. Once the victim opens this attachment, the TrojanDropper:Win32/Fedripto.A Trojan is installed. This Trojan can be used to download additional malware onto the infected computer; for example, keyloggers designed to steal the victim's World of Warcraft accounts or Worms that may eventually corrupt an entire network. The TrojanDropper:Win32/Fedripto.A Trojan has also been associated with corrupted advertisements that were at one time displayed on prominent World of Warcraft websites such as Allakhazam.

SpyHunter Detects & Remove TrojanDropper:Win32/Fedripto.A