Enigma 78 Posted February 16, 2014 Report Share Posted February 16, 2014 I just start my uBot v5.06 and i got a popup "downloading support files blablabla" and immediately my antivirus and malwarebytes blocked everything.See screenshots. http://i.imgur.com/izlVvia.png http://i.imgur.com/heMVPVi.png Link to post Share on other sites
giganut 109 Posted February 16, 2014 Report Share Posted February 16, 2014 Same problem here. My Malwarebytes Had 3 maleware alerts and tow Trojan Alerts when ubot tryied to connect. Link to post Share on other sites
Bot-Factory 602 Posted February 16, 2014 Report Share Posted February 16, 2014 I just checked the latest (5.0.7) version of that file with Virustotal: https://www.virustotal.com/de/file/52d294391553b1c45d917d0ec7bea0087d06919206fe1bdb6082b6448b34a246/analysis/1392594694/ The three alerts are false positives in my opinion.Ubot Studio has a lot of copy protection mechanisms built in. They can be detected as spyware / Trojans from time to time.Because the stuff is encrypted and is using other decompile protection routines. But if you want an official answer, I would open a support ticket with the ubot guys.CheersDan Link to post Share on other sites
luis carlos 94 Posted February 17, 2014 Report Share Posted February 17, 2014 More false positives!!! and my customers refuses to download new versions of my bots. Link to post Share on other sites
Bot-Factory 602 Posted February 17, 2014 Report Share Posted February 17, 2014 I created a feature request to remove stuff like that from ubot:http://tracker.ubotstudio.com/issues/314 If you guys think this is necessary, please jump in and write a comment. CheersDan Link to post Share on other sites
MiriamMB 63 Posted February 17, 2014 Report Share Posted February 17, 2014 We are investigating the issue and we will update this tracker once a viable solution is found for this anti-virus: http://tracker.ubotstudio.com/issues/315 For now, please make an exception for the flagged file within your anti-virus. Let us know at support.ubotstudio.com if you have any other questions about the process of investigating the issue. Link to post Share on other sites
Enigma 78 Posted February 17, 2014 Author Report Share Posted February 17, 2014 We are investigating the issue and we will update this tracker once a viable solution is found for this anti-virus: http://tracker.ubotstudio.com/issues/315 For now, please make an exception for the flagged file within your anti-virus. Let us know at support.ubotstudio.com if you have any other questions about the process of investigating the issue. In your issue you only mentioned Malwarebytes, but in my first post i also mentioned my anti virus ESET NOD32 that detected a trojan. Link to post Share on other sites
rocket976 62 Posted February 18, 2014 Report Share Posted February 18, 2014 Yea I get this too, cant even use ubot 5 because of it. Malwarebytes and eset as well. Eset is usually really good about false pos. Link to post Share on other sites
jason 101 Posted February 20, 2014 Report Share Posted February 20, 2014 Reports submitted to Malwarebytes and ESET. Please keep up to date on the issue by visiting the tracker at http://tracker.ubotstudio.com/issues/315 Link to post Share on other sites
Enigma 78 Posted February 21, 2014 Author Report Share Posted February 21, 2014 Malwarebytes seems to be solved, ESET still gives the trojan warning. Link to post Share on other sites
Bot-Factory 602 Posted February 21, 2014 Report Share Posted February 21, 2014 Might be a good idea for the Ubot Team to change their copy protection strategy a little bit?Because we might run into similar issues with every Ubot Update. Dan Link to post Share on other sites
mamica 10 Posted October 29, 2014 Report Share Posted October 29, 2014 I also lost one customer for this false positives. Really dont like it. Now every time i send someone bot i need to explain them and they look at me as i m some kind of hacker or scammer... EDIT: and at moment i use 5.5.1 version 1 Link to post Share on other sites
Marton 48 Posted October 29, 2014 Report Share Posted October 29, 2014 I also lost one customer for this false positives. Really dont like it. Now every time i send someone bot i need to explain them and they look at me as i m some kind of hacker or scammer... EDIT: and at moment i use 5.5.1 version Seth mentioned that he is contacting all major antivirus software to whitelist UBot 5.5 as well. With great communication you shouldn't lose clients because of that though. You need to explain to them that this is actually pretty common with bots (not just Ubot). You could even show them tutorials (for their specific antivirus software) or even videos that explain how they can add exceptions to their antivirus/firewall system. Communication with your customers and good customer support is probably the most important thing when you go commercial. With great communication you can even prevent refunds based on crashes (like our favorite browser.exe crash etc.). Good luck! Marton p.s.: I'm not saying that it wouldn't be great to not have to deal with stuff like this, but you will always face similar problems when you sell your software to the public. 1 Link to post Share on other sites
cateappstech 7 Posted November 1, 2014 Report Share Posted November 1, 2014 I'm having to turn my antivirus off just to compile and launch my bots I'm glad I'm not the only one so thanks for advising this. Seems to have happened since the recent update. Before that it was fine. Progress Huh Link to post Share on other sites
shanepax23 0 Posted December 4, 2015 Report Share Posted December 4, 2015 Well, I can tell you that these are not all false positives. The backdoor bot which is a ubot file is legit and it got me big time. Files from my pc have been uploaded to the internet and all kinds of other things. The ubot files ARE harmful whether they want to admit it or not. I submitted all of the ubot files to ESET and they confirmed that most of the infected files or malicious files are legit and are harmful. Obviously I can't tell my customers that it's alright and they are just false positives when they are not. I've removed every ubot file from my pc. I read the article about virus software being obsolete and not needed and couldn't believe it. Link to post Share on other sites
tnhomestead 16 Posted December 5, 2015 Report Share Posted December 5, 2015 Which files are you saying are infected? Were they core files or third party addons? Seems a lot of users here, and if the core or even addons folks would find out fast. Link to post Share on other sites
MiriamMB 63 Posted December 7, 2015 Report Share Posted December 7, 2015 Well, I can tell you that these are not all false positives. The backdoor bot which is a ubot file is legit and it got me big time. Files from my pc have been uploaded to the internet and all kinds of other things. The ubot files ARE harmful whether they want to admit it or not. I submitted all of the ubot files to ESET and they confirmed that most of the infected files or malicious files are legit and are harmful. Obviously I can't tell my customers that it's alright and they are just false positives when they are not. I've removed every ubot file from my pc. I read the article about virus software being obsolete and not needed and couldn't believe it. UBot files are absolutely not capable of uploading any files to the internet or any other "stuff". They are simply files that exist to help UBot run. It sounds like your system contracted a virus. Please run a system wide scan to find out where else the virus might have infiltrated. UBot files cannot turn into something else and upload your items to the internet, unless someone actually opened UBot and created a script in UBot on your system to do so. There is nothing to fix unless there is a false positive involved. Please check your entire system for other culprits in order to prevent this in the future. To get back on track, we have been contacting Malwarebytes, AVG, and many more and having them scan everything that comes with UBot Studio in order to remove false positives. All files are scanned and safe. If you encounter any more false positives, please feel free to add it to the tracker Link to post Share on other sites
rocket976 62 Posted December 31, 2015 Report Share Posted December 31, 2015 Yup everything is perfectly fine... however my system wont let me install either of the latest updates and daily I receive complaints from customers, spend minimum 20 min (each sub) allowing files through their av and firewalls... but everything is fine.. its their systems and mine... Link to post Share on other sites
MiriamMB 63 Posted December 31, 2015 Report Share Posted December 31, 2015 Yup everything is perfectly fine... however my system wont let me install either of the latest updates and daily I receive complaints from customers, spend minimum 20 min (each sub) allowing files through their av and firewalls... but everything is fine.. its their systems and mine...Rich, If you're encountering Specific false positives with UBot Studio, submit a ticket to the tracker as instructed and we'll contact the anti virus creator. Be sure to include the name of the Specific companies you're seeing this issue with. If you are encountering false positives with your bot, you can contact the Anti virus creator to get your bot white listed. You can bundle your files in an installer as well. Link to post Share on other sites
Recommended Posts