Before you click the link or go anywhere with this article please grab a copy of FireFox + NoScript. I am pretty sure the links are safe considering they are being hosted at warcraft radio. However I am not responsible for what you may pick up researching this stuff. Especially if you are using IE.

With that out of the way the page this link takes you too reveals how the virus is constructed. How to find it in your running processes. Why most programs cant detect the virus and a whole lot more. If your not interested in clicking off RogueSpot I will give you the short and simple version.

First if your a windows user hit (CTRL + ALT + DEL) bring up your task manager. Flip to the Processes tab and check for the following process. svch0st.exe note this is not svchost.exe which is legit. The first one has the 0 replaced with a zero. You can delete this virus by:

1. Goto your Windows/system32 folder, and delete the svch0st.exe file.
2. If you are comfortable enough, you may remove it from your registry also.

The rest of the page goes on to reveal how the virus sends your information and the information of the hacker/hacked since I beleive the poster that the owner of the system this info is being sent to has no idea its happening. He did mention he has the MSN id of the actual hacker which he would reveal to a blizz employee but we can only hope.

~Cerias Shadows