Blizzard does scan your system while you are playing wow, and if they detect a virus, they have been known to shut down your account till you get it fixed if you do not have an authenticator. They do this because if your account becomes compromised, its more work for them to fix it.

However, if you clicked a link in an email from blizzard, (real blizzard emails wont have a link for you to follow in it), and now your account has an authenticator on it, you've been tricked.

To get an authenticator removed from your account, and get it restored, since its definitely been wiped clean by now by the botters, you have to call them direct. When I had to remove my mobile authenticator after my phone died, they simply asked for things like the product key on one or two of your wow accounts or upgrades.

After the authenticator is off tho, you'll still need them to do a restore on your account; before which they'll have to do a lot of research, x5 accounts, which means you might be out of wow for a week or two.