Wbot's new version, BEWARE!!!!!!!!

was something else. my bad..... ;(

 

I guess i won't download the new one till its confirmed safe.

 

post virus scan?

 

Please post some proof before you make these accusations.

 

added proof

 

The hacker dropped the file(rat or KL) into the bot so it runs the actual bot but it's backdoored with the virus.

Can't post virus scan of a .jar

 

Run malware bytes

 

It doesn't drop shit. You're a dumbass.

 

Ever heard of a function on crypters called : Anti Sandiebox?

Obviously if someone got into such a big bot website like wBot they wouldn't make it so obv. Run it yourself and see if you get weird process and a new startups on msconfig

 

I just scanned my computer/file with Kaspersky virus protection, absolutely nothing was detected and nothing was dropped by the bot...

 

I did.

It doesn't drop shit.

 

Well idk, but it is pretty weird that the forums are down all day and how would they still have time to update the bot with all that stuff to handle?
And now they fully disabled the forums and have a note saying to download the new version..?

 

I'm not saying its infected or not, but it is kinda strange that only the download is available and the forums aren't. You can't even sign in with your forum account. How are you even supposed to add scripts without logging in and it says that its solving the script adding issue which was only because of the server being supposedly ddosed.

 

notice how all the people posting "proof" have a max of 40 post. Could be wbots own people posting.

 

Here's a pretty accurate VT scan, showing it completely clean:

https://www.virustotal.com/en/file/...20fd23a81b48c232cf4ef2db350568e3cf3/analysis/

What I do know: WBot hasn't been down all day, but it has been going up and down all day. Sometimes up, sometimes down. Forums been down for the last couple hours but repo working fine (it was going up and down with forums earlier)

The new version fixes the problem the old one had: when the forum was down, it wouldn't load the scripts. Now, even with the forum down, it loads the scripts. That can account for the 150KB difference, but at the same time, if they mirrored the DB it can be done with a 0kb difference from the other file.

Because it was fixed, I don't think a random hacker took over their system and put a KL with the version. With that said, the makers of wbot could very well be the ones doing so.

Also, Simplose, it does let you login with your forum account to the old and new version of wbot. The forums are still down, however. Last time I accessed them were about 3 hours ago, before the new version was released.

If anyone can verify the OP's KL statement's that'd be great. Nothing on my side so far.

 

the owners of wbot are the people behind all of this!

 

nevermind, i'm an idiot. still checking.

 

For those wondering: The size difference between version 3.10 and 3.11 is 128kb... You see that new advertisement that shows up in the bot? that image is 128kb and its called banner.png in the resources folder.

 

Where exactly is this "Banner?" I cannot not find it..



But is anybody 100% Sure that this new version is clean?
i mean i'm really not asking for an argument, but we all don't want to get hacked i just wanna be sure.
i know what a Crypter is, but don't crypters get detected very fast?
Besides... i highly doubt anyone would waste there time on a Bot website.

anywho, please Pm me or respond if you are 100% sure or can honestly give me a good reason as to why you think it isn't.
Much appreciated as i am just as curious as many of you.

~Auhztin