2Moons MzBot

[wunderk1nd]

Hey guy's!
After a short conversation with an ICQ Chat friend, we started to talked about botting and hacking in 2 Moons. I tought he is a clean player but when we started to talked i saw that he has some experiences with botting.

Now he send me a bot called "MzBot" I've never heard it together with 2 Moons. He tell's me that he is botting his character until lvl 86 now with this bot.

Timmaehh (21:40):
You only have to start the game and then to start the bot. Apply the start button and have fun. It isn't full of trojans. The program is made for bypass Gameguard and it have some things in it. It's safe! If you don't want to use it, don't bot!

Here is my online scan result:

Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1
File to upload & scan: Virus

Service
Service load:
0% 100%
File: MzBot.exe
Status:
INFECTED/MALWARE
MD5: fcc49aab8b39cd612985b102cbed5024
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 25 Nov 2007 21:16:53 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Mal/Dropper-G
VirusBuster
Found nothing
VBA32
Found nothing

//edit: Well.. now i've test it on my virtual machine.. No function only an "load.exe" that does not start anything. Thanks for your comments. DL link is removed because it was only crap.

greetz wunderk1nd

[Raminator]

this looks like ****, really i think its some keylogger or something because iv never heard of mzbot i think its keylogger or something i dont know what other ppl think but wait soon they reply here what they think of it

[Vyndariel]

i don't really know what i've to think of that tool...

can't see where you set up your skills
can't see where you set up your screen-details (position of health-bar)

but scan from viruschief:

Filename: MzBot.exe
Size (Bytes): 411445
MD5 Hash: fcc49aab8b39cd612985b102cbed5024
Report link:

Antivir: Nothing found
ArcaVir: Nothing found
Avast: Nothing found
AVG: Nothing found
BitDefender: Nothing found
ClamAV: Nothing found
F-Prot: Nothing found
Norman: Nothing found
Rising: Nothing found
VirusBlokAda32: Nothing found
VirusBuster: Nothing found


Scanned by

best regards

vyn

[ribow]

Full undetected

its easy to get it also its better not run ^^ or in vmware or root server ^^

[HoOnda]

ribow.. frmm ähm.. free-hack? :P
ye looks like there is a fud trojaner/keylogger
but maybe u should try it out first

[Sillyrabbit]

File: MzBot.exe
Status:
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5: fcc49aab8b39cd612985b102cbed5024
Packers detected:
-
Bit9 reports: File not found
Scanner results
Scan taken on 25 Nov 2007 23:31:11 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Mal/Dropper-G
VirusBuster
Found nothing
VBA32
Found nothing

http://www.frsirt.com/english/virus/2007/04419

direct text from that link

Description

Mal/Dropper-G is a Trojan for the Windows platform.

[SuperNever]

when someone test it and know that it 100% real bot let us know..

[Sillyrabbit]

PLEASE note the file that you download is a .rar file.

you can rename it from .exe to .rar and it works fine

after extracting you get 2 files called

load.exe
Project3.exe

THIS was programmed in delphi based on my scans

but im hesitant to run it

[Farmer John]

Never heard of it...but i dont think it trustible prolly will install a keylogger after running it.

[theonlylok1]

Just do it!

[Richou93]

well i heard of Mzbot on Maplestory and it looks something like this.

[Farmer John]

come to think of it i do think maple story had a bot such as this with same name and all...

[defekt]

i think it was called msbot

[lunapt]

anyone use this yet? whats the feedback?

[Farmer John]

i dont think anyone's used it yet "Kinda fraid of trojans,Keyloggers etc.." some scans show up clean some show up dirty....so i have no idea..