• Log InLog In
  • Register
Liquid`
Team Liquid Liquipedia
EDT 23:02
CEST 05:02
KST 12:02
  • Home
  • Forum
  • Calendar
  • Streams
  • Liquipedia
  • Features
  • Store
  • EPT
  • TL+
  • StarCraft 2
  • Brood War
  • Smash
  • Heroes
  • Counter-Strike
  • Overwatch
  • Liquibet
  • Fantasy StarCraft
  • TLPD
  • StarCraft 2
  • Brood War
  • Blogs
Forum Sidebar
Events/Features
News
Featured News
[ASL22] Ro8 Preview: In A Tizzy5[ASL22] Ro16 Preview: Holy Diver5[ASL22] Ro16 Preview: Rough Waters10[ASL22] Ro24 Preview: Siren's Call8[ASL22] Ro24 Preview: Summer's End9
Community News
BSL Season 234Weekly Cups (Sep 7-12): SHIN, ByuN, MaxPax double down1StarCraft open world shooter announced at BlizzCon101Weekly Cups (Aug 30-Sep 7): herO thrives amid growing schism10Official StarCraft website teases new content ahead of BlizzCon?179
StarCraft 2
General
Balance hotfix patch 5.0.16b (July 16) StarCraft open world shooter announced at BlizzCon SC4ALL II: StarCraft 2 Player Announcement 8/8 The Death of Cheese: From a Professional Cheeser Yamato Cup Series
Tourneys
2026 GSTL Announcement Sparkling Tuna Cup - Weekly Open Tournament RSL Revival: Season 6 - Qualifiers and Main Event RSL goes to London! 2026 Offline Finals Nov 21-22 SC2 AI Tournament 2026 Fall
Strategy
[H] ZvP Mid-Late Game: Stalkers Collossi HT
Custom Maps
Nexus Wars 2021 GUIDE [M] (2) Industrial Park
External Content
Mutation # 544 Double Trouble The PondCast: SC2 News & Results Mutation # 543 Enhanced Defenses Mutation # 542 The Ascended
Brood War
General
[ASL22] Ro8 Preview: In A Tizzy an AI researcher's take on the ladder bot Syncronization issues and can't find games BSL Season 23 Bot on ladder
Tourneys
[ASL22] Ro8 Day 1 [BSL23] SM: Ret vs TerrOr -> DragOn vs StRyKeR [Megathread] Daily Proleagues [ASL22] Ro16 Group D
Strategy
Cliff Jump Revisited (1 in a 1000 strategy) Replay Review Process - What do you do? Simple Questions, Simple Answers Odyssey Mineral Stack Saturation
Other Games
General Games
Nintendo Switch Thread Warcraft III: The Frozen Throne Stormgate/Frost Giant Megathread EVE Corporation Diablo IV
Dota 2
Dota 2 Champions League Season 3 Begins April 25! Official 'what is Dota anymore' discussion
League of Legends
[TL LoL EUW IHs] Teemo shall perish
Heroes of the Storm
Heroes of the Storm 2.0
Hearthstone
Deck construction bug
TL Mafia
TL Mafia Community Thread
Community
General
US Politics Mega-thread Things Aren’t Peaceful in Palestine All you football fans (soccer)! Russo-Ukrainian War Thread Canadian Politics Mega-thread
Fan Clubs
MarineLorD Fan Club The Creator Fan Club The ShoWTimE Fan Club
Media & Entertainment
Movie Discussion! [Manga] One Piece Diablo Animated Series on Netflix
Sports
Football (Soccer) Thread TeamLiquid Health and Fitness Initiative For 2023 MLB/Baseball 2023
World Cup 2022
Tech Support
Computer Build, Upgrade & Buying Resource Thread
TL Community
Recent Gifted Posts
Blogs
Gaming Intensity, Problemati…
TrAiDoS
38 yo Retired SWE loo…
PurE)Rabbit-SF
Can Bots Beat Pros?? Starcr…
namkraft
[meme] I finally understa…
LUCKY_NOOB
Regacy Esports:Our Goa…
regacyesports
Dreaming of BW patches (mod…
c3rberUs
Customize Sidebar...

Website Feedback

Closed Threads



Active: 13461 users

New WC3 security exploit(for those who still play)

Forum Index > General Games
Post a Reply
Goldfish
Profile Blog Joined August 2010
2230 Posts
Last Edited: 2011-01-06 09:00:33
January 06 2011 08:50 GMT
#1
Not sure where to post this actually, but since this is actually not that "new" of an exploit (Found since October 2010) and Blizzard still hasn't patched it or even mentioned it (as opposed as to the previous one which was mentioned and patched fast), I wanted to post it here as a warning.

From hiveworkshop which was from thehelper.

Post describing possibilities.

The exploit allows any malicious map maker (or map hoster) to insert code which downloads a file anywhere on your computer the next time you restart your computer (after loading the malicious WC3 map that is).

Possible usages includes downloading files to your startup folder or overwriting existing popular program files (skype, steam, etc) with maliciously modified versions for example.

Basically don't download or join random or odd WC3 custom maps (host your own games using maps you know are "clean" [maps that you played dozens of times without any problems]).

Fortunately the exploit hasn't been taken that much advantage of yet but I think it's still worth a mention in case you do play random WC3 games a lot and you have things you do not want to have taken over or lose (battle.net account passwords in case a keylogger gets downloaded to some location where it can be run through some program or autostart, etc).

Existing maps people have been playing for ages are probably safe and popular maps are safe too (well known authors of maps would not likely inject malicious code into their maps).

However there could be "clone maps" which have the same name and preview but with the malicious code in the map; those maps are the ones to watch out for (if you see you're DLing a map you already own, you should leave right away).
https://connect.microsoft.com/WindowsServerFeedback/feedback/details/741495/biggest-explorer-annoyance-automatic-sorting-windows-7-server-2008-r2-and-vista#details Allow Disable Auto Arrange in Windows 7+
Manit0u
Profile Blog Joined August 2004
Poland17843 Posts
January 06 2011 09:16 GMT
#2
Now that's pretty scary... Although, when I still played, whenever I saw I'm dling map I already own I always left. Not from the fear of malicious software but because I thought someone has rigged the map to favor them somehow.
Time is precious. Waste it wisely.
FindingPride
Profile Blog Joined July 2010
United States1001 Posts
January 06 2011 09:32 GMT
#3
Thanks for heads up.. this really pisses me off as it has happened before = /
Benjef
Profile Blog Joined December 2010
United Kingdom6921 Posts
January 06 2011 21:37 GMT
#4
Thanks for the heads up, luckily I just stick to the normal TDs, DoTa and Risk games.
<3 | Dota 2 | DayZ | <3
Puosu
Profile Blog Joined April 2007
7067 Posts
January 06 2011 21:45 GMT
#5
iirc. this happened to BW a few years ago but was fixed rather quickly, lets hope the same happens for WC3. It's rather sad to see something like this happen to a reputable company like Blizzard but I guess there'll always be holes to abuse.
Celadan
Profile Joined September 2010
Norway471 Posts
Last Edited: 2011-01-06 21:54:18
January 06 2011 21:53 GMT
#6
hmm i guess il stay of wc3(havent really played it so much lately tho)
спеціальна Тактика
LittLeD
Profile Joined May 2010
Sweden7973 Posts
January 06 2011 22:01 GMT
#7
Ill stick to my usual Legion/Eeve TD, Random Dota games and occasional ladder matches :D
Thanks for the headsup!
☆Grubby ☆| Tod|DeMusliM|ThorZaiN|SaSe|Moon|Mana| ☆HerO ☆
jnkw
Profile Joined November 2010
Canada347 Posts
January 06 2011 22:03 GMT
#8
Just wanted to provide a reference for those who might confuse this with the previous WC3 custom map code exploit.

Old WC3 exploit (not to be confused with the one mentioned by OP) http://forums.battle.net/thread.html?topicId=16888549346&sid=3000

The exploit mentioned by the OP is a new one.
Please log in or register to reply.
Live Events Refresh
Replay Cast
00:00
2026 GSTL: Playoffs Round 2
LiquipediaDiscussion
[ Submit Event ]
Live Streams
Refresh
StarCraft 2
WinterStarcraft593
RuFF_SC2 203
StarCraft: Brood War
Britney 13872
Rain 2216
GuemChi 1565
Dota 2
monkeys_forever409
NeuroSwarm192
League of Legends
Doublelift5672
Counter-Strike
taco 374
Super Smash Bros
hungrybox603
amsayoshi75
Heroes of the Storm
Khaldor185
Other Games
JimRising 673
Maynarde202
Livibee131
Mew2King55
ViBE51
[ Show 13 non-featured ]
StarCraft 2
• Hupsaiya 105
• mYiSmile13
• AfreecaTV YouTube
• intothetv
• Kozan
• IndyKCrew
• Migwel
StarCraft: Brood War
• BSLYoutube
• STPLYoutube
• ZZZeroYoutube
Dota 2
• masondota21731
League of Legends
• Lourlo245
Other Games
• Scarra1142
Upcoming Events
Afreeca Starleague
6h 58m
Shine vs Rush
WardiTV Weekly
7h 58m
Monday Night Weeklies
12h 58m
Sparkling Tuna Cup
1d 6h
Afreeca Starleague
1d 6h
Light vs EffOrt
OSC
1d 8h
PiGosaur Cup
1d 20h
Kung Fu Cup
2 days
The PondCast
3 days
Replay Cast
3 days
[ Show More ]
Korean StarCraft League
5 days
CranKy Ducklings
5 days
GSL
6 days
Yamato Cup
6 days
Replay Cast
6 days
Liquipedia Results

Completed

Super Anchor Qualifying S3
Blizzard Classic Cup 2026
Big Dog Cup 2026 Div 1

Ongoing

ASL Season 22
CSL 2026 AUTUMN (S22)
Acropolis #5
Acropolis #5 - GSA
Calamity Invitational
Logitech G Play Connect 2026
SL StarSeries Fall 2026
FISSURE Playground #3
BLAST Open Fall 2026
Esports World Cup 2026
BLAST Bounty Summer 2026
BLAST Bounty Summer Qual
Stake Ranked Episode 3
XSE Pro League 2026

Upcoming

Acropolis #5 - GSB
Acropolis #5 - GSC
BSL Season 23
SC4ALL II: Brood War
BSL 23: Non-Korean Championship
HSC XXX
Stellar Fest 2: Lunar Cup
SC4ALL II: StarCraft II
Kung Fu Cup 2026 Grand Finals
RSL Offline Finals
Copium Cup
PGL Major Singapore 2026
Stake Ranked Episode 6
BLAST Rivals Fall 2026
IEM Beijing 2026
Stake Ranked Episode 5
PGL Masters Bucharest 2026
1win Private Club #2
Thunderpick World Champ. '26
ESL Pro League Season 24
Stake Ranked Episode 4
1win Private Club #1
TLPD

1. ByuN
2. TY
3. Dark
4. Solar
5. Stats
6. Nerchio
7. sOs
8. soO
9. INnoVation
10. Elazer
1. Rain
2. Flash
3. EffOrt
4. Last
5. Bisu
6. Soulkey
7. Mini
8. Sharp
Sidebar Settings...

Advertising | Privacy Policy | Terms Of Use | Contact Us

Original banner artwork: Jim Warren
The contents of this webpage are copyright © 2026 TLnet. All Rights Reserved.