 |

07-09-2009, 03:29 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
WARNING: Optimus Infected with a Trojan!
Read here: http://optimusbot.com/showthread.php?p=11032#post11032
EDIT: It seems Synt[a]x removed the thread -.-
EDIT:EDIT: It seems that when I asked Synt[a]x why he deleted my post, he removed my post and closed the thread.
EDIT:EDIT:EDIT: The_Flames told me on msn that the above is implying that they purposefully infected the svn, so, just fyi, the_Flames says that this was not done purposefully.
CWSandbox Analysis of the Malware: http://www.cwsandbox.org/?page=repor...ord=unxhpphrih
To check if you're infected, I made a little thing in Java. It checks if the Hacker.exe file exists, and shows you a JOptionPane telling you weather or not you're infected.
Download here: http://uppit.com/v/LEMR20VN
In short: The virus modified the GameLoader to load an "Engine" class from a URL class loader, and this class downloaded a file called "RSBotUpdater.exe" to the user home directory, naming it "Hacker.exe". It proceeded to run the file. If you're on Linux/Mac, you're safe. It you're on Windows, then you're infected if you've run the latest OBot.
If you're infected, I reccommend you run some AntiVirus scans, and the usual stuff when you've gotten infected, etc.
Last edited by Jimmy : 07-10-2009 at 03:32 PM.
|

07-09-2009, 04:01 AM
|
|
Apprentice
BANNED
|
|
Join Date: May 2006
Location: Jacksonville, FL
Posts: 679
|
|
Re: WARNING: Optimus Infected with a Trojan!
19:53 jim5410 Synt[a]x
19:53 Synt[a]x ?
19:53 jim5410 Why do you close all my posts relating to the infected SVN?
19:53 jim5410 *Delete all my posts
19:53 Justin because there is an official one?
19:54 Synt[a]x because
19:54 Synt[a]x its a fuckin shame
19:54 Synt[a]x that such a thing happens
19:54 Synt[a]x im sort of ashamed
19:54 Synt[a]x and scared of losing shitloads of ppl
19:54 jim5410 :\
Last edited by Repentless : 07-09-2009 at 04:02 AM.
|

07-09-2009, 04:13 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Lol, what careless people.
Code:
Synt[a]x jim5410
20:10 Synt[a]x mrquarter commited it, his gmail probs got hacked because he uses same pw for everything
20:10 Synt[a]x -.-
20:12 jim5410 -.-
20:12 jim5410 What a smart person
20:12 Synt[a]x i used to do that too uno
20:12 Synt[a]x lol
20:12 jim5410 lol
20:12 Synt[a]x when i was 8
20:12 Synt[a]x LOL
20:12 c|p newbiehacker did that
20:12 jim5410 Lmao
20:12 c|p cus
-.-
|

07-09-2009, 04:24 AM
|
 |
Guru
|
|
Join Date: Jan 2009
Location: East Cost
Posts: 1,484
|
|
Re: WARNING: Optimus Infected with a Trojan!
dont get the last post....
I was going to dl opti bot too lucky I didnt
|

07-09-2009, 04:25 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Quote:
Originally Posted by Mike¥
dont get the last post....
I was going to dl opti bot too lucky I didnt
|
It got infected because one of their mod's gmail accounts got hacked, due to the fact that he used the exact same password everywhere.
|

07-09-2009, 04:25 AM
|
|
Apprentice
BANNED
|
|
Join Date: Aug 2008
Location: Edgeville
Posts: 681
|
|
Re: WARNING: Optimus Infected with a Trojan!
Hey Jim, thanks for telling us all this. I downloaded oBOT about a day or two ago. I didn't type in any information and then I deleted it. Recommendations?
|

07-09-2009, 04:28 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Quote:
Originally Posted by iDan
Hey Jim, thanks for telling us all this. I downloaded oBOT about a day or two ago. I didn't type in any information and then I deleted it. Recommendations?
|
Doubt you're infected, but you could run the little app that I gave in the first post. The information you entered into the bot is completely irrelevant to the virus. The bot simply downloaded and ran an infected .exe, so regardless of what you entered, you are either infected or not infected. :\
|

07-09-2009, 04:35 AM
|
 |
Guru
|
|
Join Date: Jan 2009
Location: East Cost
Posts: 1,484
|
|
Re: WARNING: Optimus Infected with a Trojan!
Any news on when it will be fixed
I heard ur the go-to guy for jmacro, should I get it over obot?
|

07-09-2009, 04:38 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Quote:
Originally Posted by Mike¥
Any news on when it will be fixed
I heard ur the go-to guy for jmacro, should I get it over obot?
|
I believe Synt[a]x just fixed it (he made a new SVN).
Tbfh, just try them both and make a choice based off of that. Remember, though, I don't give svn access to anybody who doesn't have my complete trust  (Currently I'm the only people with jmacro svn access xD).
|

07-09-2009, 04:41 AM
|
 |
Guru
|
|
Join Date: Jan 2009
Location: East Cost
Posts: 1,484
|
|
Re: WARNING: Optimus Infected with a Trojan!
I think I'll wait few days to make sure its safe
remind I'd what svn is :0
|

07-09-2009, 04:50 AM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Quote:
Originally Posted by Mike¥
I think I'll wait few days to make sure its safe
remind I'd what svn is :0
|
I don't think waiting is really going to improve the situation. Synt[a]x is the only person atm with access to the new SVN, so, if that's infected, then Synt[a]x is knowingly infecting all of his users, and the bot is not at any time safe to use.
SVN: http://en.wikipedia.org/wiki/Subversion_(software)
|

07-09-2009, 07:26 PM
|
|
Member
|
|
Join Date: Jul 2009
Posts: 55
|
|
Re: WARNING: Optimus Infected with a Trojan!
I personally don't believe that any of these bots have viruses or trojans built in them/
|

07-09-2009, 07:37 PM
|
 |
Leecher
|
|
Join Date: Jun 2008
Location: Southern California
Posts: 2,359
|
|
Re: WARNING: Optimus Infected with a Trojan!
Quote:
Originally Posted by tehdragons
I personally don't believe that any of these bots have viruses or trojans built in them/
|
Then you obviously didn't read the thread and/or are a very ignorant, stubborn person.
|

07-09-2009, 08:04 PM
|
|
Newcomer
|
|
Join Date: Jul 2009
Posts: 18
|
|
Re: WARNING: Optimus Infected with a Trojan!
If Jimmy says its infected then its infected. If Jimmy says that 1+1=4 then by god it equals 4, the math books have it all wrong, and logic needs to change its ways.
|

07-09-2009, 11:51 PM
|
|
Guru
BANNED
|
|
Join Date: Jun 2009
Location: London town =]
Posts: 1,753
|
|
Re: WARNING: Optimus Infected with a Trojan!
 Glad i chose not to use this one.
|
 |
|