Scan your computer

[JamesMoon]

I dont know if DemonBuddy has been compromised. As I know it has been in the past. I have been using DemonBuddy for over a year now with no problems. I use no other programs related to D3, But I got hacked today and lost all my items. I got them recovered by Blizzard but now everything I have is account bound which makes my account not worthy no more. I have over 20+ billion in items that are all now account bound which sucks. I had only ~170m on it and I only got 10m back as thats the max it can give you.

What my computer found was a trojan called "Kj_12" was located on my C:\Windows\kj

Im not saying Demonbuddy is infected, but as a precaution I advise you to scan immediately.

 

[CodenameG]

we've been doing daily scans on all releases.

heres the last one for demonbuddy.
https://www.virustotal.com/en/file/...04c3db5a912339348bab66d8/analysis/1378274748/

the infections showing are false positives.

so unless your grabbing your releases from somewhere else, you couldn't of gotten it from us.

 

[CodenameG]

heres a new scan from just a few minutes ago, besides the false positives the release is still clean.
https://www.virustotal.com/en/file/...04c3db5a912339348bab66d8/analysis/1378434641/

 

[JamesMoon]

Yea I don't download DemonBuddy from anywhere. The only things I do on my laptop is bot on D3, and play on a WoW private server. I actually haven't downloaded any type of other hacks in a very long time, so I'm actually shocked on how I got this one. It didn't compromise my email or my WoW retail account, (Which I'm suprised.) Seem's like a random hacker got into my account even though my password is fairly long and has numbers and caps in it. Noone else know's my password to my account and the password to my D3 account is different than all my other games or social media networks. Very strange. I'm not targeting DemonBuddy but I'm only posting here because this is the only "hack" type program I use on my computer.

 

[iCKR]

Yea I don't download DemonBuddy from anywhere. The only things I do on my laptop is bot on D3, and play on a WoW private server. I actually haven't downloaded any type of other hacks in a very long time, so I'm actually shocked on how I got this one. It didn't compromise my email or my WoW retail account, (Which I'm suprised.) Seem's like a random hacker got into my account even though my password is fairly long and has numbers and caps in it. Noone else know's my password to my account and the password to my D3 account is different than all my other games or social media networks. Very strange. I'm not targeting DemonBuddy but I'm only posting here because this is the only "hack" type program I use on my computer.

Well, the file is clean on our side. Make sure you run an antivirus scan on your computer again before you login if you're worried.

 

[CodenameG]

you know it could of been something that was sitting on your system for a long time, but your AV finally updated to include it.

 

[Midas]

Definitely could be something from ages ago.

I had old warez games/apps from 'safe' sources sitting around from 5-10 years ago that never flagged back in their day, and then one day the AV gets updated and detects these old kegen/*****ed .exe as containing trojans.

Bottom line if you only use this computer for DB now then format and reinstall windows and then you'll be sure from now on.