Buddy Bots infected with trojan.

[08449]

Yesterday 18 December Buddy Bots developer Hawker announced that their build server was infected with a trojan keylogger. Hawker also mentioned that this trojan was specifically designed to attack Demonbuddy and Honorbuddy, but it infected some different builds as well.


The products that were infected with this trojan were:
- 1 release of Arelog
- 1 release of GW2Buddy
- HonorbuddyBETA release of last week
- DemonbuddyBETA release of last week


All users of Buddy Bot products are advised to scan their computer with Microsoft Security Essentials, which detects and destroys the trojan. Reset your World of Warcraft, Diablo 3 and/or Guild Wars 2 passwords as well, just to be safe.


In light of the 18 December banwave, speculations have arisen that the trojan might somehow be connected to the banwaves.

[Neer]

How to remov Virus - MMOCrawlerbots | WoW Bot Forum
AMDEx3.msi Popped up in my processes and that's probably it check if you have it follow the instructions on that site.

[mouse18]

AMDEx3.msi Is in fact correct.

They have said that theyre "servers were hacked" and have not given more information since.

[ezpwnd]

I find it kinda funny how nobody seems to care about this. I would have expected a massive shitstorm if something like this happened. A keylogger distributed through the official website - nice!

[Dark_Mage-]

They were initially locking/deleting all threads related when it was still "unconfirmed" by official staff (in fact, it was denied at first, I think). A shitstorm then was visible on the horizon and they showed minimal response. I am sure they still remove any "shitstorm" topics. It is indeed a very big deal. I heard they were even trying to pin the banwave on the malware. I find that quite funny. I guess next shift of responsibility will be a blame drop on the "cracked" versions on MMO-Cheats and Blizzhackers. That is typical, and rarely true. That's a very d2jsp-esque approach.

[wired420]

They were initially locking/deleting all threads related when it was still "unconfirmed" by official staff (in fact, it was denied at first, I think). A shitstorm then was visible on the horizon and they showed minimal response. I am sure they still remove any "shitstorm" topics. It is indeed a very big deal. I heard they were even trying to pin the banwave on the malware. I find that quite funny. I guess next shift of responsibility will be a blame drop on the "cracked" versions on MMO-Cheats and Blizzhackers. That is typical, and rarely true. That's a very d2jsp-esque approach.

They always lock and delete anything that makes them look bad until they come up with an excuse to cover for it... Isn't that all Tony is paid for? On another note. I've gone through both builds (Downloaded when they became available originally and archived). Nothing in either of them. Either this was distributed to a select few on purpose, or its a total lie that has been pushed to avoid seeming to have spread the team thin, or shoddy coding. Either way. I saw people get banned in a chat almost immediately as they opened these versions of the bot. Glad I was busy with finals and didn't have time to mess with it.

[Kalcypso]

Started botting agani earlyer today, havent had any issues, so it must bes afe again

[ezpwnd]

Started botting agani earlyer today, havent had any issues, so it must bes afe again

Yeah, must be safe since you already botted for a few hours!

[juliet]

new build is clean is as far as i can see, its funny how they managed to infected their servers .... whats even more funny is how they managed to instruct the client to download the infected file from the servers .... sounds fishy

[Riverzz]

Hello, im not the one who reads this things but now when i have i checked my game computer and i have nothing when i checked my cmd BUT when i opend my task manager i have a prosess called atieclxx.exe and it does not say what its for in the task manager my game computer is a asus gamer and os os windows 7 is its anything to be worried about?? PLZ PM ME!!

[LisaL]

Scary, i scanned my version, didnt find anything, is it gone now?

[connectzor]

its clean now?

[AzzyDG]

They always lock and delete anything that makes them look bad until they come up with an excuse to cover for it... Isn't that all Tony is paid for? On another note. I've gone through both builds (Downloaded when they became available originally and archived). Nothing in either of them. Either this was distributed to a select few on purpose, or its a total lie that has been pushed to avoid seeming to have spread the team thin, or shoddy coding. Either way. I saw people get banned in a chat almost immediately as they opened these versions of the bot. Glad I was busy with finals and didn't have time to mess with it.

I completely agree with you wired420, Tony has been shutting down every single thread that I have ever made which made them look bad. It's really impossible to say anything bad about the staff/software on the budddy forum despite it being truth or not. Another thing which really went south is the greed if I can call it so. They got involved in a ton of projects and none of them are polished as HB used to be. Nowadays they keep pushing and expanding, finally one can see it's all about the cash with them, not quality. A ton of bugs in some of their software, other barely usable and nobody cares but as soon as you start pointing out the truth you get shut down in an instant.

[jackus]

I completely agree with you wired420, Tony has been shutting down every single thread that I have ever made which made them look bad. It's really impossible to say anything bad about the staff/software on the budddy forum despite it being truth or not. Another thing which really went south is the greed if I can call it so. They got involved in a ton of projects and none of them are polished as HB used to be. Nowadays they keep pushing and expanding, finally one can see it's all about the cash with them, not quality. A ton of bugs in some of their software, other barely usable and nobody cares but as soon as you start pointing out the truth you get shut down in an instant.

Might be true. But they still made me 4k euros

[MarkusAntonsen]

Botd downloaded from Honorbuddy are CLEAN