What's new
By:
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal

Demonbuddy Beta infected

P

pwnyhofpl0x

Member
Joined
Dec 12, 2012
Messages
140
Reaction score
0
thumb.db would connect to a URL, get a picture which contained the trojan and begin catchign the users WoW, Guild Wars 2 and Diablo 3 passwords through game=%s&host=%s&user=%s&pass=%s

Heres another screenshot showing what its stealing


http://i.imgur.com/W8Zl6.png
http://i.imgur.com/TuOae.png
http://i.imgur.com/6bE7R.png

So far no "official" word other then "Our servers got hacked, we are trying to figure how this happened" Lots of potential users could have been hit by this, and accounts possibly hacked.
 
Thanks for the heads up. I just changed all my passwords.
 
Ye its really a shame that noone from the officials lost a word about it ... silence to dead!
 
 
Does the download still contain the trojan? I just upgraded to latest beta about an hour ago.

Where should i look for that thumb.db file? It's not in my db folder at least.
 
 
There seems to be another version of this floating around. Check the following reg values

Local_Machine\SYSTEM\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters\ServiceDll AMDEx3.msi
Local_Machine\SYSTEM\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters\ServiceDll AMDEx3.msi
Local_Machine\SYSTEM\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters\ServiceDll AMDEx3.msi
 
funny shit, just when the server got hacked i TOLD them something like this would happen, but some DEV just laughed telling me this would never happen. Actually, i'd like to see the Database getting hacked more often, maybe the shitty service here would change. :)
 
I used Ctrl + F to look for anything called "AMDEx3.msi" and didn't find anything nor did I see a "6to4" folder under any of the ControlSet001/002 folders. Does this mean I wasn't infected?
 
This can have anything with recent waves in diablo and wow? and almost all reports been only from buddys? :P
 
ChuckLee said:
It’d be honestly hard to say for sure, possibility however very unlikely
Click to expand...
i dont want to flame or anything, but if our information was going somewhere, why they dont use it for something, like clean the accounts for profit? :p
i have wow account with more than 1milion gold in same as diablo that i used to bot, and its not touched, they can be gathering information for months, and sell all it for blizz maybe?
 
You must log in or register to reply here.
Back
Top