2Moons MzBot

11/25/2007 22:20 wunderk1nd#1
Hey guy's!
After a short conversation with an ICQ Chat friend, we started to talked about botting and hacking in 2 Moons. I tought he is a clean player but when we started to talked i saw that he has some experiences with botting.

Now he send me a bot called "MzBot" I've never heard it together with 2 Moons. He tell's me that he is botting his character until lvl 86 now with this bot.

Quote:
Timmaehh (21:40):
You only have to start the game and then to start the bot. Apply the start button and have fun. It isn't full of trojans. The program is made for bypass Gameguard and it have some things in it. It's safe! If you don't want to use it, don't bot!

Here is my online scan result:

Quote:
Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1
File to upload & scan: Virus

Service
Service load:
0% 100%
File: MzBot.exe
Status:
INFECTED/MALWARE
MD5: fcc49aab8b39cd612985b102cbed5024
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 25 Nov 2007 21:16:53 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Mal/Dropper-G
VirusBuster
Found nothing
VBA32
Found nothing
[Only registered and activated users can see links. Click Here To Register...]

//edit: Well.. now i've test it on my virtual machine.. No function only an "load.exe" that does not start anything. Thanks for your comments. DL link is removed because it was only crap.

greetz wunderk1nd
11/25/2007 23:12 Raminator#2
this looks like crap, really i think its some keylogger or something because iv never heard of mzbot i think its keylogger or something i dont know what other ppl think but wait soon they reply here what they think of it :p
11/25/2007 23:29 Vyndariel#3
i don't really know what i've to think of that tool...

can't see where you set up your skills
can't see where you set up your screen-details (position of health-bar)

but scan from viruschief:

Filename: MzBot.exe
Size (Bytes): 411445
MD5 Hash: fcc49aab8b39cd612985b102cbed5024
Report link: [Only registered and activated users can see links. Click Here To Register...]

Antivir: Nothing found
ArcaVir: Nothing found
Avast: Nothing found
AVG: Nothing found
BitDefender: Nothing found
ClamAV: Nothing found
F-Prot: Nothing found
Norman: Nothing found
Rising: Nothing found
VirusBlokAda32: Nothing found
VirusBuster: Nothing found

[Only registered and activated users can see links. Click Here To Register...]
Scanned by [Only registered and activated users can see links. Click Here To Register...]

best regards

vyn
11/25/2007 23:30 ribow#4
Full undetected ;)

its easy to get it also its better not run ^^ or in vmware or root server ^^
11/25/2007 23:53 HoOnda#5
ribow.. frmm ähm.. free-hack? :P
ye looks like there is a fud trojaner/keylogger
but maybe u should try it out first
11/26/2007 00:36 Sillyrabbit#6
File: MzBot.exe
Status:
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5: fcc49aab8b39cd612985b102cbed5024
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 25 Nov 2007 23:31:11 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Mal/Dropper-G
VirusBuster
Found nothing
VBA32
Found nothing


Code:
http://www.frsirt.com/english/virus/2007/04419
direct text from that link


Code:
Description

Mal/Dropper-G is a Trojan for the Windows platform.
11/26/2007 00:43 SuperNever#7
when someone test it and know that it 100% real bot let us know..
11/26/2007 01:19 Sillyrabbit#8
PLEASE note the file that you download is a .rar file.

you can rename it from .exe to .rar and it works fine

after extracting you get 2 files called

load.exe
Project3.exe

THIS was programmed in delphi based on my scans

but im hesitant to run it
11/26/2007 01:45 Farmer John#9
Never heard of it...but i dont think it trustible prolly will install a keylogger after running it.
11/26/2007 01:46 theonlylok1#10
Just do it!
11/26/2007 01:56 Richou93#11
well i heard of Mzbot on Maplestory and it looks something like this.
11/26/2007 02:02 Farmer John#12
come to think of it i do think maple story had a bot such as this with same name and all...
11/26/2007 03:31 defekt#13
i think it was called msbot
11/26/2007 04:07 lunapt#14
anyone use this yet? whats the feedback?
11/26/2007 06:07 Farmer John#15
i dont think anyone's used it yet "Kinda fraid of trojans,Keyloggers etc.." some scans show up clean some show up dirty....so i have no idea..