They are clean now but they exposed you to a real threat, and you pay for their products. Be it a bot or a bubble gum, if it presents a direct threat for you or your safety, and you pay for it.. We'll I'm sure a lawyer would be happy here. In case you are in business management, take a look at Bossland. That's a pure example of how NOT to run a business.
On a side note, the CM (cracked) version of honorbuddy wasn't affected. The guys were totally cool with it like "Oh btw, ours was clean. PWND".
Paying for products where you get nothing is not business, its comedy central. Take a look at Blizzard ^.^