Virus found in mm-bot !!!

[jag]

Antivir just found a virus in mm.BOT.539c.zip:


C:\DIABLOII\_DOWNLOADS\mm-bot
mm.BOT.539c.zip
ArchiveType: ZIP
--> mm.BOT.539c\Config\System\Process.exe
[FUND!] Enthält Signatur des SPR/Processor.20- Programmes

[Stickmatrix]

obviously you've downloaded a version from a bad site
i checked out the one thats on here. no virus. a few other d2 fansites have it. not virused x]

[zerochris1985]

when did .539c come out

[jag]

Was from the link that was posted from user manus-magnus on this forum, and in the mousepad-forum:

http://www.premiumwanadoo.com/manus-magnus/


Original threads:
http://www.d2sector.net/forums/showthread.php?t=22760


http://www.mousepad-d2.com/phpBB2/viewto...db4e981cc1






...I just downloaded the bot-files from here and tested them - same result:

C:\DIABLOII\_DOWNLOADS
MM.BOT.537+MOD.ZIP
ArchiveType: ZIP
--> mm.BOT.537+MOD\mm.BOT.537\Config\System\Process.exe
[FUND!] Enthält Signatur des SPR/Processor.20- Programmes

Try and test it with Antivir...

[pt14]

maybe its just saying something in the auto-it script is a virus because i am 100% sure manus isnt asshole enough to virus his bot

[manus-magnus]

LOL, this is logical, all dumb scanners are affraid about autoitv3 functions... like change process priority or compression....

btw you found nothing, go onto Autoit V3 website, install Autoit V3 and compile a 4 lines script like this:


<TABLE cellSpacing=1 cellPadding=3 width="90%" align=center border=0><TBODY><TR><TD>Code:</TD></TR><TR><TD class=code>ProcessSetPriority (@ScriptName, 4)
While 1
sleep (100)
Wend</TD></TR></TBODY></TABLE>



and you will get same results... Pfffffffff

also note i see you suscribed on other forums to say the same shit ...
who are you in reality, and what are you try to do, JAG ?

[OOTF]

mag, dont even listen to this babbling fool.... atleast every1 around here knows the truth and trusts ya.. let him live in his own little parinoid world... its all good... if there was a virus in your bot, or a backdoor.. you could have ripped my accnt for the last year or whenever you first came out with it LOL.. its all good man

[reckstar]

manus magnus is a P.I.M.P. haha

[Shady772]

Wow his 3 posts almost made me believe him

[WarriorOfD2X]

maybe its just saying something in the auto-it script is a virus because i am 100% sure manus isnt asshole enough to virus his bot

maby not, but im 100% you are.

[skidude]

i have checked every bot he has released and nothing bad found

[jag]

mag, dont even listen to this babbling fool.... atleast every1 around here knows the truth and trusts ya.. let him live in his own little parinoid world... its all good... if there was a virus in your bot, or a backdoor.. you could have ripped my accnt for the last year or whenever you first came out with it LOL.. its all good man

I dont get it!?!! Im just posting what I found with antivir! How stupid can anyone be to flame someone who just posts a warning?

Paranoid? Yes, if u find a virus with a scanner and dont trust a guy you havent heard of yet
is really para eh? Who is the fool here...?

also note i see you suscribed on other forums to say the same shit ...
who are you in reality, and what are you try to do, JAG ?

Like I already wrote - I posted the warning in both forums where I found something about your bot.

What "shit" did I post? Did I flame someone (besides answering flames maybe)? Did I write anything untrue? I just posted what I found - nothing more.

And what I try to do? I dont know you! I just wanted to post a warning and wanted to make a hacker think about another way of profit of good work than by using a virus to rip off other players.

I dont know you. I already stated in mousepads forum that I like your bot (from description). If there is no virus - fine. But I always check before using any programs.











I just found this:

http://*******.com/phpBB2/viewtopic.php?p=63017

(you have to exchange ******* with r e a l m g x without space. Dont know why this gets ***...???)

Guess manus-magnus is right about autoit. Im sorry for that.

[bak-sickpro]

no virus here... just found tals armor with his bot

[Matt Barlow]

well, here found:

result at:http://virusscan.jotti.org/

<table class="servicetable" border="0" cellpadding="2" cellspacing="2" width="90%"><tbody><tr><td class="resultcell" align="right" width="250"> AntiVir </td> <td class="resultcell"> Found SPR/Processor.20
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> ArcaVir </td> <td class="resultcell"> Found Trojan.Clicker.Small.Ht
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> Avast </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> AVG Antivirus </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> BitDefender </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> ClamAV </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> Dr.Web </td> <td class="resultcell"> Found not a virus Tool.Prockill
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> F-Prot Antivirus </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> Fortinet </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> Kaspersky Anti-Virus </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> NOD32 </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> Norman Virus Control </td> <td class="resultcell"> Found W32/LowZones.NR
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> UNA </td> <td class="resultcell"> Found Trojan.Win32.LowZones
</td> </tr> <tr> <td class="resultcell" align="right" width="250"> VBA32 </td> <td class="resultcell"> Found nothing
</td> </tr> <tr> <td colspan="2">
at virustotal.com :

<table id="resultados" border="0" cellpadding="0" cellspacing="0" rules="all"><tbody><tr><td>AntiVir</td><td>6.31.1.0</td><td>09.12.2005</td><td>SPR/Processor.20</td></tr><tr><td>Avast</td><td>4.6.695.0</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>AVG</td><td>718</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>Avira</td><td>6.31.1.0</td><td>09.12.2005</td><td>SPR/Processor.20</td></tr><tr><td>BitDefender</td><td>7.0</td><td>09.02.2005</td><td>no virus found</td></tr><tr><td>CAT-QuickHeal</td><td>8.00</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>ClamAV</td><td>devel-20050725</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>DrWeb</td><td>4.32b</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>eTrust-Iris</td><td>7.1.194.0</td><td>09.13.2005</td><td>no virus found</td></tr><tr><td>eTrust-Vet</td><td>11.9.1.0</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>Fortinet</td><td>2.41.0.0</td><td>09.07.2005</td><td>W32/Lowzones.BX-tr</td></tr><tr><td>F-Prot</td><td>3.16c</td><td>09.13.2005</td><td>no virus found</td></tr><tr><td>Ikarus</td><td>0.2.59.0</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>Kaspersky</td><td>4.0.2.24</td><td>09.13.2005</td><td>no virus found</td></tr><tr><td>McAfee</td><td>4579</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>NOD32v2</td><td>1.1214</td><td>09.12.2005</td><td>no virus found</td></tr><tr><td>Norman</td><td>5.70.10</td><td>09.12.2005</td><td>W32/LowZones.NR</td></tr><tr><td>Panda</td><td>8.02.00</td><td>09.12.2005</td><td>Application/Processor</td></tr><tr><td>Sophos</td><td>3.97.0</td><td>09.13.2005</td><td>no virus found</td></tr><tr><td>Symantec</td><td>8.0</td><td>09.13.2005</td><td>no virus found</td></tr><tr><td>TheHacker</td><td>5.8.2.105</td><td>09.12.2005</td><td>Aplicacion/Processor.20</td></tr><tr><td>VBA32</td><td>3.10.4</td><td>09.12.2005</td><td>no virus found</td></tr></tbody></table>
</td></tr></tbody></table>




i did get the mm.bot.539c at d2e\/ent because the original site was don't working here

[Silent_killers]

Cool, I never knew MM was real.

[skidude]

there is nothing in mm bot that can hurt anyones comp or cdkeys so no need 4 this thread anymore

-closed-