Honorbuddy.exe is a trojan

[sk8411blind]

Just to let you know for the creators of honorbuddy, your program is showing up as trojans on our Antiviruses and is being auto deleted. Is there anyway that you guys can solve the problem and release a newer version of honorbuddy.
thank you,
Steve

 

[tumbum]

yes got this the first time too. normaly honorbuddy.exe is on my whitelist.

 

[Forseti]

same here, first time virus/trojan alert, is the update today a regular one? ... I renamed the honorbuddy.exe.bak to honorbuddy.exe and run the "old" .exe for the moment.

Update: OK, the .exe don't work anymore, when i try to start an bot/routine, honorbuddy crashes now critically (the "old" honorbuddy.exe, from ~13.07.2013)

 

[amdex3]

i just downloaded the update zip from this url

http://updates.buddyauth.com/GetNewest?filter=Honorbuddy

when i opened up the 232 KB Honorbuddy.exe a 16 KB file was put into the following directory

C:\Windows\Installer

this file is called AMDEx3.msi and it is a trojan my av caught it

after this had happened the Honorbuddy.exe was changed to the file size of 6.37 MB

you can reproduce this over and over by deleting the AMDex.msi and unzipping a fresh copy of the honor buddy and running the honorbuddy exe, each time the honorbuddy will change file size from 232 KB to 6.37 MB so it will only happen once each time you unzip the update

this file is comming from the honorbuddy team for what reason i have no idea but you your self can watch it happen

1: dl honorbuddy zip from http://updates.buddyauth.com/GetNewest?filter=Honorbuddy

2: open the following directory C:\Windows\Installer it is hidden so you can copy paste "C:\Windows\Installer" into the top of the window to see it

3: run the honorbuddy exe in the freshly extracted zip and watch the file show up

4: watch the honorbuddy team say its not their file and delete/close this thread and wonder why

 

[Tony]

for those who updated to 639 (which is the problematic build) delete it and scan your machine