IW.net allegedly spreading a Trojan virus

Reported in this forum post on the official IW forums and our very own forums apparently hackers have found a way to go around the IW.net system and send a Trojan virus through the IW.net system to Modern Warfare 2 players. Reverse engeneering the source code for Modern Warfare 2, the hackers inserted their Trojan and used the IW.net system to spread it to players across the globe. This was brough to light after several players got notified of a breach in their security by their antivirus software. The Trojan TR/Crypt.XPACK.Gen had been sent to them using Modern Warfare 2's IW.net as the official transmitter (according to the antivirus). The Trojan itself apparently already surfaced in Call of Duty : World at War and is some sort of keylogging software hackers use to steal keycodes or potentially worse (stealing credit card information for instance).

The Trojan would exploit the port that is opened by Call of Duty when you are a listen server (when you are the host of a game) to send you the Trojan without your knowledge.

Here is a screenshot provided by Matje on the forums where his anticheat has picked up on the Trojan.



Additional information on the virus can be found here and here.

Stay tuned as we try to find out more about the Trojan and how it is exactly being spread. Due note that it is not 100% confirmed that it is actually Modern Warfare 2 (and an exploit in the game) sending you this virus.It could very well be a false positive! We have still to hear an official reaction to this news.

* update *

Another community member of ours has tracked down the location of the virus on his PC and found it to be located here: C:\Documents and Settings\yourusername\Local Settings\Temp with the file names ~B8.tmp and ~B8.vir. (windown XP)
The most important discovery however is that the files were created when the player was playing Modern Warfare 2 and he was set up as the host of the game!