SRL Archive - News and General

The Au_.exe executable file belongs to the rogue anti-spyware program, SpyFalcon. This malicious program camouflages itself as an anti-spyware utility when in fact it is a Trojan. This malware has the capability to infiltrate your computer through security exploits and install itself along with other Trojans. What the file basically does is hijack the user’s desktop and changes user settings to make it function according to its own requirements.

Au_.exe is also linked to many other spyware, adware and cloaked malware groups. Where some say that the origin of this Trojan is unknown, some are of the opinion that the malicious software to which the file belongs can be downloaded easily from manufacturer’s website. The file is also said to be a part of the Arovax Anti-Spyware software. This may be probable, as the initial description says that this executable pretends to be an anti-spyware application.

How Au_.exe Infects your PC

The following are some of the ways au_.exe is known to affect the PC it infects:

Deletes essential processes from the disk
Executing harmful processes stored in temporary folders
Creates other potentially dangerous processes on your system.
Uses HTTP protocols to communicate with other computer systems for malicious purposes.
Adds bad entries to the registry.
Hijacks system processes to delete links in the Start Menu and can be a source of annoyance for many users.
Looks at what’s inside the autoexec.bat file and invades your privacy by reading email addresses and phone book details.


IF you have downloaded this bot, and you are seeing decreases in PC performance, files disappearing, or anything else strange, open task manager, go to processes, Select: Show processes from all users, look for Au_.exe, and end it, then go to: C:\Users\User\AppData\Local\Temp, if you see a folder ~nsu.tmp open it, and see if there is a program with the Epicbot icon, if so, go back and delete the ~nsu.tmp and restart your computer.

Awesome. Though I'm hoping most people already knew that Epicbot was a virus, now you guys know how to remove it properly. Thanks for the helpful post.

It doesn't even add to startup?

First time when I downloaded it did my Anti Malwarebytes pro pop up so I knew from the beginning it was a malware lol.

Expected it to have malware. I'll be sticking with Simba for the rest of my RuneScape career.

i never touched epicbot and i never will :) simba is the best in my mind, and if it isnt, it can definetly become it

I chucked Epicbot onto my laptop to test this out, no AU_.exe in the process :P

Did you hit all processes, and did you try running it?

From: xtrapsp
I chucked Epicbot onto my laptop to test this out, no AU_.exe in the process :P

same lol

Epicbot itself has no virus. When you install Epicbot the installer also installs other Third-party applications unless you uncheck the boxes.

Wrong, if you read…. the virus in epicbot is disguised as spyware ^

Someone help im freaking it :s

I dont have Au_.exe as a process.

I've tried running Epicbot but the process still doesn't show up, what do i do?

hmm now its a good bot atm, now will it hurt anything sitting in a virtual machine ?

Cheezits guys… I'll get a sandboxie of it within the hour…

-Edit-
Lol, I can't even get to download it because it is known malware. Fail.
http://www.youtube.com/watch?v=MITJ1zjFQ6k&feature=youtu.be

More fail

I see no reasoning for sandboxie now.
There is your proof naysayers!

From: botsalot123
hmm now its a good bot atm, now will it hurt anything sitting in a virtual machine ?

As long as you have nothing of importance on it and you don't mind if your account is stolen.

i find the au.exe i just deleted what i should do now ??

Epic bot itself doesn't have a virus.. if u monitored it with Process Explorer and GMer or watch it execute with OllyDbg and WireShark or a packetsniffer/monitoring tool you'd know that.. What flags this thing is actually the shitload of ads and thirdparty software.. The thirdparty stuff is full blown malware for sure though. Could possibly be associated with epicbot.. but the bot itself has nothing.

Also if your playing around with testing bots and don't have outbound connections(Except RS) in your firewall blocked for that application then you have problems..

Like we said from the beginning EpicBot has a virus/logger attached to it. good How to for those who has fallen into the epicbot trap.

From: rice
Like we said from the beginning EpicBot has a virus/logger attached to it. good How to for those who has fallen into the epicbot trap.

Actually, as pointed out above, Epicbot itself actually doesn't contain a virus. The extras that the installer, by default, installs are malware. You can choose to not install the extras though.

Its a good thing I haven't used epicbot then.

I really hope the same isn't for rarebot…

From: sahibjs
Its a good thing I haven't used epicbot then.

I really hope the same isn't for rarebot…

Well Rarebot is mostly color, or so I've heard? Correct me if i'm wrong please. But any bot you have to install most likely do or will in the future contain spyware/malware/keyloggers. Except for Simba of course! :P My advice is wait to use other bots until after the upcoming bot nuke.

From: Incarceron
Actually, as pointed out above, Epicbot itself actually doesn't contain a virus. The extras that the installer, by default, installs are malware. You can choose to not install the extras though.

I never said EpicBot itself was a virus. I said there was one ATTACHed to it.

im using epicbot for long time ( only to gain money ) and didnt have any hack attempt.
when you first install epicbot it ask you if you want to install another 3rd part programs, just click cancel and none of the harmfull programs will be on your pc, even if you want to use epic bot and you afraid to have a virus/trojan or any other harmfull programs, just install epicbot, copy the already installed epicbot ( the .jar file) to USB disk or any other storage device, format your pc and run the .jar on the new clean version of windows. i dont undrstand how people getting hacked by usign epicbot, its because people are stupid, they are going on youtube and looking for runescape bots, youtube find them videos with bots and fake download link (an infected epicbot) you click on "more info" and you see something like: DOWNLOAD EPICBOT: www.mediafire.com/blablabla
seriously, who is downloading epicbot or any other bots from mediafire he will be infected 100% and then they blame epicbot, oh cmon guys, just download from official sites, same thing with simba, people are stupid if they are downloading from non official sites. for me epicbot is safe as longer as you dont install all the shit that comes with the epicbot installer.

Epicbot is not a virus/keylogger, these problems only occur when you download a malicious copy -.-

Its not that i like epicbot or anything but i use that bot at the same time i use this, ATM i am running eb, without any Au_.exe also i would like to say that i used it even before the nuke, and got several 99's with it. So EB is safe… just so u guys know

From: ivanch11
Its not that i like epicbot or anything but i use that bot at the same time i use this, ATM i am running eb, without any Au_.exe also i would like to say that i used it even before the nuke, and got several 99's with it. So EB is safe… just so u guys know

This.

Then i guess we can just wait ;(
I would suggest changing your pass daily and not use a credit card on your computer^

I remember telling people epicbot was a virus and i showed them my virus scan and they said: STFU paranoid kid. Ur AV is wrong. trololo they probably all got hacked ;)

Everyone here is in denial:(

From: Jfalko
Everyone here is in denial:(

How r we in denial when there are accounts being hacked left n right

From: rice
How r we in denial when there are accounts being hacked left n right

He means all the noobs saying "Oh I haven't been hacked yet! Must be safe!'

^this

From: Jfalko
^this

Search the keyword "epicbot" and you'll find atleast 20 posts with noobs saying "I've been using for 6 hours to 4 days and I haven't been hacked yet! Haha its totally safe!" No! It means they have too many accounts to steal banks from and haven't gotten to you yet! Stupid noobs! :duh::duh::duh::duh::duh::duh:

We need a *face-keyboard* smiley!

From: ggzz
Epic bot itself doesn't have a virus.. if u monitored it with Process Explorer and GMer or watch it execute with OllyDbg and WireShark or a packetsniffer/monitoring tool you'd know that.. What flags this thing is actually the shitload of ads and thirdparty software.. The thirdparty stuff is full blown malware for sure though. Could possibly be associated with epicbot.. but the bot itself has nothing.

Also if your playing around with testing bots and don't have outbound connections(Except RS) in your firewall blocked for that application then you have problems..

I don't think that specific application would connect to any extra ports. The RAT and other goodies that get installed wouldn't be subject to those rules.

I'll be completely honest. I've been using Epicbot, and Simba. Epicbot still hasn't stolen my account. It's an OK account. 30m on it… level 70 range pure.. nothing special..
but, still hasn't been taken.. Just saying, don't download all of the extra shit that somes with it, because they ARE viruses.

I haven't paid much attention to any of this at all, but from what I've gathered the supporters stance is mainly "hey, it doesn't install this known malware/adware to your computer unless you accept it hurr durr". The bot trying to install anything like that at all instantly makes me suspicious as fudge about it. Not to mention hearing about lots of Epicbot/Rarebot users suddenly starting to get hacked (apparently mostly by chinese people) all the time.

Now of course there's tons of people saying "well, i havent been hacked! (yet)", but if I was some greedy butthole stealing the info of tons of accounts, I would probably empty them at a slow pace at first, so the majority of users will just assume it's the individuals fault, and they will say things like "Hey, I haven't had any trouble! This is legit! (for now at least)".

I heard Jagex is releasing another nuke "soon" (scheduled this month or next?), too. Whenever that happens I highly suggest getting rid of anything related to EB and any bots like it and instantly changing all passes. If Jagex does a good job the admins might just think "fudge this poopoo, lets just clean as many accs as we can and kill this project, so we can run with the money.". Wouldn't even be surprising in todays RS.

From: GoF
I haven't paid much attention to any of this at all, but from what I've gathered the supporters stance is mainly "hey, it doesn't install this known malware/adware to your computer unless you accept it hurr durr". The bot trying to install anything like that at all instantly makes me suspicious as fudge about it. Not to mention hearing about lots of Epicbot/Rarebot users suddenly starting to get hacked (apparently mostly by chinese people) all the time.

Now of course there's tons of people saying "well, i havent been hacked! (yet)", but if I was some greedy butthole stealing the info of tons of accounts, I would probably empty them at a slow pace at first, so the majority of users will just assume it's the individuals fault, and they will say things like "Hey, I haven't had any trouble! This is legit! (for now at least)".

I heard Jagex is releasing another nuke "soon" (scheduled this month or next?), too. Whenever that happens I highly suggest getting rid of anything related to EB and any bots like it and instantly changing all passes. If Jagex does a good job the admins might just think "fudge this poopoo, lets just clean as many accs as we can and kill this project, so we can run with the money.". Wouldn't even be surprising in todays RS.

This is exactly what I've been saying!! People are so stupid!

That says it

From: Jfalko
The Au_.exe executable file belongs to the rogue anti-spyware program, SpyFalcon. This malicious program camouflages itself as an anti-spyware utility when in fact it is a Trojan. This malware has the capability to infiltrate your computer through security exploits and install itself along with other Trojans. What the file basically does is hijack the user’s desktop and changes user settings to make it function according to its own requirements.

Au_.exe is also linked to many other spyware, adware and cloaked malware groups. Where some say that the origin of this Trojan is unknown, some are of the opinion that the malicious software to which the file belongs can be downloaded easily from manufacturer’s website. The file is also said to be a part of the Arovax Anti-Spyware software. This may be probable, as the initial description says that this executable pretends to be an anti-spyware application.

How Au_.exe Infects your PC

The following are some of the ways au_.exe is known to affect the PC it infects:

Deletes essential processes from the disk
Executing harmful processes stored in temporary folders
Creates other potentially dangerous processes on your system.
Uses HTTP protocols to communicate with other computer systems for malicious purposes.
Adds bad entries to the registry.
Hijacks system processes to delete links in the Start Menu and can be a source of annoyance for many users.
Looks at what’s inside the autoexec.bat file and invades your privacy by reading email addresses and phone book details.


IF you have downloaded this bot, and you are seeing decreases in PC performance, files disappearing, or anything else strange, open task manager, go to processes, Select: Show processes from all users, look for Au_.exe, and end it, then go to: C:\Users\User\AppData\Local\Temp, if you see a folder ~nsu.tmp open it, and see if there is a program with the Epicbot icon, if so, go back and delete the ~nsu.tmp and restart your computer.

laughing my head off as i read this. honestly its not a virus. want proof? extract the so called malicious virus download the real virus that will screw your computer and compare the two by scanning with the trusted malware bytes or avast. dont post about things you dont know just to hate on an injection bot, and by the way i can copy and paste too.


so i went ahead and checked the old spy falcon website. guess what? their gone… what? is it possible yes, is spyfalcon still around yes, now here is the tricky crap spy falcon has nothing to do with epic bot, therefore epic bot wouldn't touch spy falcon. spy falcon only does spy falcon it doesn't help others i hope you get the jest of things this is also copy and pasted.

From: superbuster4
laughing my head off as i read this. honestly its not a virus. want proof? extract the so called malicious virus download the real virus that will screw your computer and compare the two by scanning with the trusted malware bytes or avast. dont post about things you dont know just to hate on an injection bot, and by the way i can copy and paste too.


so i went ahead and checked the old spy falcon website. guess what? their gone… what? is it possible yes, is spyfalcon still around yes, now here is the tricky crap spy falcon has nothing to do with epic bot, therefore epic bot wouldn't touch spy falcon. spy falcon only does spy falcon it doesn't help others i hope you get the jest of things this is also copy and pasted.

You're an idiot. :duh:

Epicbot isn't a virus, and I pity those poor fools with foil tophats who think it is.
Epicbot has a two part profit mechanism:

1. Users who buy Pro scripts.
2. Advert powered installer.

While it sucks that they have whored their bot installer out to these rogue software makers, it does not mean that the payload software is malicious. There are MANY freeware programs out there that are totally benign and accomplish much needed tasks, but have installers that try to give you garbage toolbars, hijack your searches, or worse. It's part of the web today, get used to it and be smart when installing things, always say no to the extra 'offers'. Common sense.

I have 6 accounts I run using epicbot, and I have for a long time. Not "lolz 6 hours no ban and account isnt hacked", but countless hours, a purple phat, and almost a bil in cash between the 6. If there was hacking going on, I'd have been hacked by now.

Here's the kicker: Kids that bot, as a general rule, have a tendency to download anything if it promises to do what they want. So add that to the fact that they're too slow to understand how an advert installer works, and boom; you have someone who downloads Epicbot, and 6 other things in about an hour. One of those other things is infected and steals their stuff. GG. They then cry to forums:

omg giuse, epicbot stole my acct infos and all my gold is gone and my character naked. no, id never download any keyloggers pretending to be gold h4x lolz, plz gief gold im broked. anyone kno were i can download a gold h4x (that's infested with spyware so I can lose my account again?)

…but anyone with a brain knows exactly how they got infected.

I'm sorry to those of you who have fallen prey to account thieves. If it makes you feel better, those people have a lot of practice…

^^ thank god someone has some understanding.

i got a virusscanner but it didnt say anyting to me :D

From: CrysisMK2
Epicbot isn't a virus, and I pity those poor fools with foil tophats who think it is.
Epicbot has a two part profit mechanism:

1. Users who buy Pro scripts.
2. Advert powered installer.

While it sucks that they have whored their bot installer out to these rogue software makers, it does not mean that the payload software is malicious. There are MANY freeware programs out there that are totally benign and accomplish much needed tasks, but have installers that try to give you garbage toolbars, hijack your searches, or worse. It's part of the web today, get used to it and be smart when installing things, always say no to the extra 'offers'. Common sense.

I have 6 accounts I run using epicbot, and I have for a long time. Not "lolz 6 hours no ban and account isnt hacked", but countless hours, a purple phat, and almost a bil in cash between the 6. If there was hacking going on, I'd have been hacked by now.

Here's the kicker: Kids that bot, as a general rule, have a tendency to download anything if it promises to do what they want. So add that to the fact that they're too slow to understand how an advert installer works, and boom; you have someone who downloads Epicbot, and 6 other things in about an hour. One of those other things is infected and steals their stuff. GG. They then cry to forums: …but anyone with a brain knows exactly how they got infected.

I'm sorry to those of you who have fallen prey to account thieves. If it makes you feel better, those people have a lot of practice…

This. Tired of this ignorance on this topic lawl, and I'm pretty sure "Unchecking the boxes" doesn't work. They are smarter than that.

From: FifthDimension
This. Tired of this ignorance on this topic lawl, and I'm pretty sure "Unchecking the boxes" doesn't work. They are smarter than that.

It does work. Use a VM and watch it with procmon + filesystem filters on.

That's how I've done it from the beginning, and it's always been clean for me.

I run Comodo AV on paranoid mode, so I am alerted when a program so much as tries to scratch it's ass.

When I downloaded epicbot, I did a full uninstallation of adware programs. After doing so I found this thread, looked in my temp folder and found no ~nsu.temp and did a full AV sweep with BitDefender and found nothing.

ok just to clear this mess up. the adds is how they make money. if you download the spam its ur stupidity. do not post about ones stupidity and trying to say epic bot is infected with spy falcon, just stop yourself.

ignorance leads to stupidity, stupidity leads to war.

From: superbuster4
ok just to clear this mess up. the adds is how they make money. if you download the spam its ur stupidity. do not post about ones stupidity and trying to say epic bot is infected with spy falcon, just stop yourself.

ignorance leads to stupidity, stupidity leads to war.

yep. your right. I'm happy I'm a supporter of 3 different RS botting websites, its quite an interesting sight seeing how everybody can never get along.

Yes because the extra installation crap has anything to do with wanting rsgp? That's some crappy toolbar makers goal? I think not. Who wants to hack your account and take your gold? The person that added a virus to epic/rs/anythingelse bot if they aren't open source they are a virus. Plain and simple. Why would someone want to hide their source from their users? Because it has a virus in it!!!

"Oh I've been using it on accounts with 1b+ and maxed stats and I haven't been hacked ftw!" Noo!!! THEY JUST HAVENT GOTTEN TO YOUR ACCOUNT YET! Come on! Quit saying your antivirus didn't find anything so its clean. There are SOOO many viruses that can't be detected. Quit being ignorant little brats and accept the fact that they are all viruses.

Well while I agree with you on most of the things you have said. What I don't agree with you on is that you say anything closed source related to Runescape is a virus. SCAR isn't a virus and so are many other things. But they are closed sourced.

From: Jokester
Yes because the extra installation crap has anything to do with wanting rsgp? That's some crappy toolbar makers goal? I think not. Who wants to hack your account and take your gold? The person that added a virus to epic/rs/anythingelse bot if they aren't open source they are a virus. Plain and simple. Why would someone want to hide their source from their users? Because it has a virus in it!!!

"Oh I've been using it on accounts with 1b+ and maxed stats and I haven't been hacked ftw!" Noo!!! THEY JUST HAVENT GOTTEN TO YOUR ACCOUNT YET! Come on! Quit saying your antivirus didn't find anything so its clean. There are SOOO many viruses that can't be detected. Quit being ignorant little brats and accept the fact that they are all viruses.

From: RISK
Well while I agree with you on most of the things you have said. What I don't agree with you on is that you say anything closed source related to Runescape is a virus. SCAR isn't a virus and so are many other things. But they are closed sourced.

AFAIK Simba is open source.

From: Jokester
Yes because the extra installation crap has anything to do with wanting rsgp? That's some crappy toolbar makers goal? I think not. Who wants to hack your account and take your gold? The person that added a virus to epic/rs/anythingelse bot if they aren't open source they are a virus. Plain and simple. Why would someone want to hide their source from their users? Because it has a virus in it!!!

"Oh I've been using it on accounts with 1b+ and maxed stats and I haven't been hacked ftw!" Noo!!! THEY JUST HAVENT GOTTEN TO YOUR ACCOUNT YET! Come on! Quit saying your antivirus didn't find anything so its clean. There are SOOO many viruses that can't be detected. Quit being ignorant little brats and accept the fact that they are all viruses.

Your name is fitting, because what you say is a joke. Lolz "all closed source software is a virus". Dumbass. You need a tinfoil suit to match your tinfoil hat; the government might not be able to read your mind but they might be able to control your body otherwise……………

Seriously, though. I can't believe I'm actually posting this, but…:
Reasons to be closed source:

• Prevent upstarts from taking your code, modifying it, and redistributing it with malware inside.
• Prevent the game owners from reading your code, finding a telltale heuristic (a.k.a. 'signature' move) that your bot will do every time something occurs, and bot nuking all your users.
• Prevent people from downloading your source, fucking something up, and getting themselves banned.
• Prevent competitors from stealing your source, adding stuff, and selling it.
• Protect paid script makers. Open source = much harder to secure…imagine that.
• The list goes on…

Ohh…I almost forgot…
Use wireshark to monitor the packets epicbot sends to their servers. All it sends is GET requests for needed information, some POST with version data, etc. It sends EXACTLY the same data with different account data in the list.

From: Jokester
Yes because the extra installation crap has anything to do with wanting rsgp? That's some crappy toolbar makers goal? I think not. Who wants to hack your account and take your gold? The person that added a virus to epic/rs/anythingelse bot if they aren't open source they are a virus. Plain and simple. Why would someone want to hide their source from their users? Because it has a virus in it!!!

"Oh I've been using it on accounts with 1b+ and maxed stats and I haven't been hacked ftw!" Noo!!! THEY JUST HAVENT GOTTEN TO YOUR ACCOUNT YET! Come on! Quit saying your antivirus didn't find anything so its clean. There are SOOO many viruses that can't be detected. Quit being ignorant little brats and accept the fact that they are all viruses.

lol. its closed source because they have paid scripts the reason srl is open source is because they only take donations and sell nothing. if epic bot was open source jagex could mess with them and put their website to an end and even possible sew them. power bot even has proof of a ddos attack from Cambridge, its suspected jagex is behind it.

From: superbuster4
lol. its closed source because they have paid scripts the reason srl is open source is because they only take donations and sell nothing. if epic bot was open source jagex could mess with them and put their website to an end and even possible sew them. power bot even has proof of a ddos attack from Cambridge, its suspected jagex is behind it.

Paid scripts have nothing to do with it… pbot used to be opensource and had paid scripts. So did rsbuddy… Us being open source has nothing to do with only taking donations. We have nothing to hide.

From: Jokester
Paid scripts have nothing to do with it… pbot used to be opensource and had paid scripts. So did rsbuddy… Us being open source has nothing to do with only taking donations. We have nothing to hide.

do you still not get it? powerbot is going to be a closed source. its no because they have anything to hide, well maybe they do, but they main reason of closing your sources is because you do not want anyone to temper with it, do you realy think jagex cares about those little questions that ask if they are related to jagex? no they don't they do what they want.

They cannot even program malware properly. They should of wrote a kernel based rootkit - it would of helped them hide their malware better. But, I am not surprised. Which is why I didn't get fooled and run.

From: superbuster4
do you still not get it? powerbot is going to be a closed source. its no because they have anything to hide, well maybe they do, but they main reason of closing your sources is because you do not want anyone to temper with it, do you realy think jagex cares about those little questions that ask if they are related to jagex? no they don't they do what they want.

Do you still not get it? It's a virus. Many bots were open source and had no problems with doing it. And if they aren't infecting it then they shouldn't have any problem with showing the source. And check out Sin's thread.

From: Jokester
Do you still not get it? It's a virus. Many bots were open source and had no problems with doing it. And if they aren't infecting it then they shouldn't have any problem with showing the source. And check out Sin's thread.

You. Are. An. Idiot.

If closed source software was bad…ugh, I don't even know where to begin.

As to the negative rep you gave me on my post about open source: "all of those can be done with closed source programs. stop talking out your ass."

Let me restate those items that this dipshit says can be done with open as well as closed source programs:

• Prevent upstarts from taking your code, modifying it, and redistributing it with malware inside.
• Prevent the game owners from reading your code, finding a telltale heuristic (a.k.a. 'signature' move) that your bot will do every time something occurs, and bot nuking all your users.
• Prevent people from downloading your source, fucking something up, and getting themselves banned.
• Prevent competitors from stealing your source, adding stuff, and selling it.
• Protect paid script makers. Open source = much harder to secure…imagine that.
• The list goes on…

You may now feel like a retard.

PS:
http://blog.grumpycoder.net/index.php/post/2011/01/17/Why-open-source-is-bad

And a final parting shot:
Did it ever occur to you that the writers of EpicBot OWN it? That it's THEIRS, by copyright? That maybe, just maybe, they don't share their sauce with you because they're a company, and they have a profit margin?

From: CrysisMK2
You. Are. An. Idiot.

If closed source software was bad…ugh, I don't even know where to begin.

As to the negative rep you gave me on my post about open source: "all of those can be done with closed source programs. stop talking out your ass."

Let me restate those items that this dipshit says can be done with open as well as closed source programs:

• Prevent upstarts from taking your code, modifying it, and redistributing it with malware inside.
• Prevent the game owners from reading your code, finding a telltale heuristic (a.k.a. 'signature' move) that your bot will do every time something occurs, and bot nuking all your users.
• Prevent people from downloading your source, fucking something up, and getting themselves banned.
• Prevent competitors from stealing your source, adding stuff, and selling it.
• Protect paid script makers. Open source = much harder to secure…imagine that.
• The list goes on…

You may now feel like a retard.

PS:
http://blog.grumpycoder.net/index.php/post/2011/01/17/Why-open-source-is-bad

And a final parting shot:
Did it ever occur to you that the writers of EpicBot OWN it? That it's THEIRS, by copyright? That maybe, just maybe, they don't share their sauce with you because they're a company, and they have a profit margin?

First I didn't de-rep you. Second it doesn't matter if someone else takes their source. If someone takes their source and can't just create their own bot then the bot will be crap and no one will use it in the first place. Pbot was open-source for a very long time and the only thing to happen was the recent bot nuke if im not mistaken.

Does extremely high bandwidth/uploads/downloads( 2gb per day on a private server) count as the signs? I almost got hacked, and for the past months, my new comPuter has been overheating, as i thought i have deleted the epicbot files completely. I have macafee antivirus.

Epicbot has been out for more than a year, if they were going to mass hack people then their users wouldn't but anymore scripts and they'd lose a lot of money. Think of it this way they could make 15k from one person or 45 dollars from them buying scripts. I know which one I would prefer.
Presides I've decompiled the client after every update, there has been no malware i have discovered so far and i run it on a vm with 4 accounts. All of them valuable accounts and nothing.

From: GoF
I haven't paid much attention to any of this at all, but from what I've gathered the supporters stance is mainly "hey, it doesn't install this known malware/adware to your computer unless you accept it hurr durr". The bot trying to install anything like that at all instantly makes me suspicious as fudge about it. Not to mention hearing about lots of Epicbot/Rarebot users suddenly starting to get hacked (apparently mostly by chinese people) all the time.

Now of course there's tons of people saying "well, i havent been hacked! (yet)", but if I was some greedy butthole stealing the info of tons of accounts, I would probably empty them at a slow pace at first, so the majority of users will just assume it's the individuals fault, and they will say things like "Hey, I haven't had any trouble! This is legit! (for now at least)".

I heard Jagex is releasing another nuke "soon" (scheduled this month or next?), too. Whenever that happens I highly suggest getting rid of anything related to EB and any bots like it and instantly changing all passes. If Jagex does a good job the admins might just think "fudge this poopoo, lets just clean as many accs as we can and kill this project, so we can run with the money.". Wouldn't even be surprising in todays RS.

I think they are paid sponsor apps that contain viruses, not that it makes it any more acceptable

i have noticed that my computer has becoming more slower and running not as smoothly. i believe it is my epicbot. I have done what you said but when ever i go check if the file is deleted it is still there and still can not uninstall the program. please help!

I have used epicbot since before it came out on 2011, i have scanned it numerous times before, and after the bot nuke with professional security programs, never found anything.

My account has had +100m on money pouch for over a year, and i have used epicbot nearly the whole time. Never been hacked.

The positive virus result is from third party software, when you spamclick "continue" on your installation program, and decide to install toolbars or something like that. If you would have been patient, you would have unchecked the boxes, and tada, no virus alarm for you.

Well there account stealing over @ Epicbot que must be a god damn year long cause I've never got a account hacked… I've used them over a year ago… I've used Powerbot and as of late nothing but Simba… None of these 3 have viruses in the minimal installation process…

From: Incarceron
Epicbot itself has no virus. When you install Epicbot the installer also installs other Third-party applications unless you uncheck the boxes.

some1 with some common sense finally, i have no problem with simba or epicbot but if u install epicbot it works fine and is clean. first 5 windows or so of its instalation are not even epicbot if u slow down unlike a fool with 12 toolbars on top of there IE or firefox or whatever when u install you would notice.

dont use epic bot, i was insanely lucky. I installed it along with all the third party shit, the third party shit had viruses, I tried using epicbot and it didn't even work. I logged onto runescape from chrome and banked all my shit and went to bed. When I logged on the next day it said my bank pin was pending to be deleted, changed my pass and everything luckily I banked everything.

I used epicbot 4months before they hacked me. When I started using eb i had 270m money and when they hacked me only 110m was left because i trained herblore. that malware sometimes closed my computer and moved my mouse. DONT USE EPICBOT!

From: wayiyi
I used epicbot 4months before they hacked me. When I started using eb i had 270m money and when they hacked me only 110m was left because i trained herblore. that malware sometimes closed my computer and moved my mouse. DONT USE EPICBOT!

Sounds like a RAT, dude. Let me guess, you downloaded a cracked epicbot pro version from youtube?

From: Gala
Sounds like a RAT, dude. Let me guess, you downloaded a cracked epicbot pro version from youtube?

is there really such a big market for that?

From: -Benny
is there really such a big market for that?

Yea, it is sad but true. There are big communities selling all you need to get slaves. But most of them are kiddies with basic c/c++/vb knowledge, so nothing professional.
I never used EpicBot but computer shutdown/mouse control are typical commands of a kid who wants to clean his victims bank as fast as possible. So definitely a RAT.

HA! This thread was hilarious. This botting site is just as safe if not worse then epicbot… Lul. Sites make stuff up and edit pictures all the time. Both sites do this to attack other users.

From: oneshadow
This botting site is just as safe if not worse then epicbot…

that statement will NEVER be true for these reasons:

1. srl/simba/smart is all open source software. you can view every single line of code and compile it yourself. if there were a virus/rat in either simba or smart, everyone would know by now, simply because everyone can see it for themselves. ALL other bot are closed source. this means that they can put whatever they want in the program, and you will never be able to view it. if they had a rat in there, you will never know.

2. the srl community is not a "omg lets bot on rs for the gps" type of community. srl has always made learning a pinnacle for the community. here, we make u go through the code and learn how to input ur name/pass. we dont just say, click run and it will run (all other bots do this). we force ppl to look at at-least a little bit of the code. the atmosphere here is about learning how to program and script, not scripting itself. one great example is found in the great program Simba. this program was never designed for runescape. it was designed for any possible script, with any possible application or game. we are not limited to rs, we do not limit our learning experience. you can never say that for any other botting site. they are all centered around rs, thus more likely to give u a rs-specific rat/virus.

3. the average IQ of people on this site is far higher than those on other botting sites. I understand that there are many smart people associated with each bot! But this community isnt a leech-centric community. Powerbot,Epicbot, iWannaGetHackedBot, etc, all are centered around their leechers, because their leechers pay them the money. After the first bot nuke, many dumb leechers came here sadly, and i dont believe our community has been quite the same since. but it still has far less leechers than other communities. where there are smarter people, there are fewer opportunities to trick those people. getting a virus is simply tricking the victim. leechers dont even know how to go to file - open - bla.simba … do u know how many threads have been made about "adding a bot". …the ignorance and stupidity oozes out of them. if there were to be a virus, it would be targeted towards the mass of the mindless.

epicbot can steal my accounts with that virus?

K lets get this settled.

1. That open source argument that a ton of SRL members seem to use is ridiculous. Any project can be open source and still have a virus and I will bet all my money on it. Know why? Think about this. How many users of Simba really compile it themselves? Do you compile Smart yourself? No.. Not very many even know how to write hello world but they argue open source cuz others say that. It's like the Windows vs. Linux. Half the kids that say Linux are just copy cats or the wannabe haxors and cool kids. Linux is only good if you know how to use it. The open source argument is only valid if you compile everything yourself.

2. Epic bot doesn't have a virus. Decompile it with OllyDbg. Decompile it with IDAPro and tell me where the virus is.. I don't use epicbot. I used to years ago. I recently decompiled it while helping someone to see if there was a way to get it to run on Java 6 along with swift kit and smart all at the same time. It has no virus.

3. You don't trust the exe? Then fine. Run the jar from command line. Or just double clickt he jar.

4. You don't trust the jar? Deobb it and look it over with CJBE and you'll see.

5. Monitor it with backtrack, wireshark, or some packet sniffer and you'll see it doesn't send out malicious requests. Infact you can even break down each packet sent out and see the info sent with it. Everything is bytes. 4 bytes = 1 letter UTF-32.. Usually 1-4 bytes per character depending on the encoding. Print the bytes of each packet to a console or file and you'll see that no packet contains your password or username. If you just sniff it alone, you can see it just sents update requests to epicbot and all other info goes to runescape.

6. The extra crap you install with epicbot doesn't have viruses but rather it has spyware/adware. Thus the solution is to decline everything and just install epicbot alone. That's it.

So please stop arguing this b.s. open source stuff if you're not compiling it yourself. Stop hating on other bots as well. It doesn't make these forums any better. Someone asks for help setting up a bot from another site, just help them if you can. I've seen guys on powerbot saying email them and they'd help setup Simba for you. I've seen people bash RID guys here who are trying to learn scripting. This kinda stuff is non-sense.


That should clear up everything. Just remember.. pb was opensource at one time yet like 50k guys got hacked. Opensource isn't an argument guys.

From: Brandon
K lets get this settled.

1. That open source argument that a ton of SRL members seem to use is ridiculous. Any project can be open source and still have a virus and I will bet all my money on it. Know why? Think about this. How many users of Simba really compile it themselves? Do you compile Smart yourself? No.. Not very many even know how to write hello world but they argue open source cuz others say that. It's like the Windows vs. Linux. Half the kids that say Linux are just copy cats or the wannabe haxors and cool kids. Linux is only good if you know how to use it. The open source argument is only valid if you compile everything yourself.

i dont compile everything myself, but i sure as hell have gone through smart and simba's source countless times and compiled. used it as a learning tool. the argument for open source still stands though (imo). just because a person can be lazy, doesnt mean u can completely eliminate this argument. you are right, it only is valid if ppl actually look into it, but i personally believed that people did… i mean, why not!? dont ppl care about viruses :/

skipping the some of the rest, simply because i agree with u on most of it. no need to address it.

So please stop arguing this b.s. open source stuff if you're not compiling it yourself. Stop hating on other bots as well. It doesn't make these forums any better. Someone asks for help setting up a bot from another site, just help them if you can. I've seen guys on powerbot saying email them and they'd help setup Simba for you. I've seen people bash RID guys here who are trying to learn scripting. This kinda stuff is non-sense.


That should clear up everything. Just remember.. pb was opensource at one time yet like 50k guys got hacked. Opensource isn't an argument guys.

i still think it is :/ you can lead a camel to water, but if they are too stupid to open their eyes… in open source software, everything is there, right in front of you. all one has to do is not be lazy. in closed source software, you have to decompile it, which afaik, is technically illegal. the person whom i was responding to in my post above said there were higher chances of getting a virus here, than at epicbot. i was simply showing him in #1 how if you arent lazy, then there is no way to get a virus. open source will always be safer than a closed source program, because u can legally view all the files, and nothing is hidden. its your choice on whether u want to get infected or not with those files.

From: x[Warrior]x3500
i dont compile everything myself, but i sure as hell have gone through smart and simba's source countless times and compiled. used it as a learning tool. the argument for open source still stands though (imo). just because a person can be lazy, doesnt mean u can completely eliminate this argument. you are right, it only is valid if ppl actually look into it, but i personally believed that people did… i mean, why not!? dont ppl care about viruses :/

skipping the some of the rest, simply because i agree with u on most of it. no need to address it.



i still think it is :/ you can lead a camel to water, but if they are too stupid to open their eyes… in open source software, everything is there, right in front of you. all one has to do is not be lazy. in closed source software, you have to decompile it, which afaik, is technically illegal. the person whom i was responding to in my post above said there were higher chances of getting a virus here, than at epicbot. i was simply showing him in #1 how if you arent lazy, then there is no way to get a virus. open source will always be safer than a closed source program, because u can legally view all the files, and nothing is hidden. its your choice on whether u want to get infected or not with those files.

I wasn't specifically responding to you. But here goes:

1. It can only be valid if you compile it yourself every single time. Why? Because if Wizzup was a bad man, he'd put a virus in the download but nothing in the source. It's the same thing that happened to powerbot. Virus in the jar but nothing in the source. More than half the forum does not compile it themselves. You may be one of the few if you do compile it yourself. That being said, if you want opensource to be a valid argument you cannot just look through the source and say "It's safe.. I'll use the exe provided".

2. It isn't illegal to reverse engineer it because by law, where I live you have the right to knowledge. The illegal part comes where you modify it to suit your own needs. As long as you don't do that, nothing is stopping you from reverse engineering anything to see how it's made or what it contains.

3. Laziness would be a valid defense but unfortunately that's more than half the forum which is why I think opensource doesn't count as an argument. Reason being is that most of use are lazy. We wait on Wiz and Ben to push fixes, we just download the exe's and dll's because it's quick and we trust them. Trust is the keyword here.

That all being said. I only compile smart myself when a new version hits because I like to modify it and sometimes add a button or two or an extra functionality, get rid fo the black spaces on the sides, etc.. I don't compile Simba often unless I feel the need to modify something or add something I think isn't there.

Other than those reasons, I trust Ben and Wiz enough to just download what's provided. I guess I am lazy but at the same time sometimes curious. Even at times I just feel like modifying it just for the sake of having it how I want.

Epicbot is safe, why would they risk hacking or having virus!
They're making tons of money off the Script, i don't see why people think it contains virus!

You must had virus off somewhere else!
don't check mark the other load of sh%t that comes with the installation!

i like Simba more, but i still use EpicBot!

From: Godric
Epicbot is safe, why would they risk hacking or having virus!
They're making tons of money off the Script, i don't see why people think it contains virus!

You must had virus off somewhere else!
don't check mark the other load of sh%t that comes with the installation!

i like Simba more, but i still use EpicBot!

Indeed, even if you de-compile every single line of EpicBot you will and shall not find a virus. They're making shitloads of money from hacking accounts with that ''Enter your name and password here shit''. They got no valid reason for pussing a malware into it.

started with epic bot to try to get back into rs. now i need to get rid of this thing because Simba is the best right now
es #1
too stronk

Thanks a lot for that post I wouldnt have known otherwise

Oh god whoever made this post is a moron.

I've been using epicbot, rsbot, powerbot - for about 4-5 years on the same 2 accounts and both accounts have had the same name, password, email and recovery questions for 7 years and neither have a bank pin - All without problems and these so called viruses - Either my system is immune (impossible) to these 'hack' attempts and 'virus infections' or I'm just lucky, which I doubt. - I speak 100% truth of MY PERSONAL experience with these bots.
- Not saying it's fact, it's just my personal experience which cant be wrong.

So why's there so much hate for these bots? They work straight away with 0 computer knowledge and most scripts are more stable than even the best simba scripts available to non-members.

I think this forum needs to leave these bots alone and stop picking on them, they work fine and they don't hack you. (both my accounts are 99 in every skill and have so many billions it would make you shit yourself so i'm pretty sure my accounts would be high priority to hack).

It's common that someone will follow an in-game link to free rsgold or membership and enter their details like a monkey and then say "OMFG HAX0R EPIcBOT HAX ME OMG" or that you save your passwords inside a script or notepad on your desktop you're just asking to get hacked so don't blame the bot for it.

Don't get me wrong though, those bots do get you banned if you bot like a monkey (same applies to simba, though)

From: Silba
I've been using epicbot, rsbot, powerbot - for about 4-5 years on the same 2 accounts and both accounts have had the same name, password, email and recovery questions for 7 years and neither have a bank pin - All without problems and these so called viruses - Either my system is immune (impossible) to these 'hack' attempts and 'virus infections' or I'm just lucky, which I doubt. - I speak 100% truth of MY PERSONAL experience with these bots.
- Not saying it's fact, it's just my personal experience which cant be wrong.

So why's there so much hate for these bots? They work straight away with 0 computer knowledge and most scripts are more stable than even the best simba scripts available to non-members.

I think this forum needs to leave these bots alone and stop picking on them, they work fine and they don't hack you. (both my accounts are 99 in every skill and have so many billions it would make you shit yourself so i'm pretty sure my accounts would be high priority to hack).

It's common that someone will follow an in-game link to free rsgold or membership and enter their details like a monkey and then say "OMFG HAX0R EPIcBOT HAX ME OMG" or that you save your passwords inside a script or notepad on your desktop you're just asking to get hacked so don't blame the bot for it.

Don't get me wrong though, those bots do get you banned if you bot like a monkey (same applies to simba, though)

Cool Story.
But Why did you come here then? If they are better than Simba Script, Why come to Villavu?

From: Silba
I've been using epicbot, rsbot, powerbot - for about 4-5 years on the same 2 accounts and both accounts have had the same name, password, email and recovery questions for 7 years and neither have a bank pin - All without problems and these so called viruses - Either my system is immune (impossible) to these 'hack' attempts and 'virus infections' or I'm just lucky, which I doubt. - I speak 100% truth of MY PERSONAL experience with these bots.
- Not saying it's fact, it's just my personal experience which cant be wrong.

So why's there so much hate for these bots? They work straight away with 0 computer knowledge and most scripts are more stable than even the best simba scripts available to non-members.

I think this forum needs to leave these bots alone and stop picking on them, they work fine and they don't hack you. (both my accounts are 99 in every skill and have so many billions it would make you shit yourself so i'm pretty sure my accounts would be high priority to hack).

It's common that someone will follow an in-game link to free rsgold or membership and enter their details like a monkey and then say "OMFG HAX0R EPIcBOT HAX ME OMG" or that you save your passwords inside a script or notepad on your desktop you're just asking to get hacked so don't blame the bot for it.

Don't get me wrong though, those bots do get you banned if you bot like a monkey (same applies to simba, though)

Did you even look at the post date of the thread? this was when it just came online…

Its been so long since I heard others accusing bots to have viruses :) Good times..Good times :)

From: Silba
I think this forum needs to leave these bots alone and stop picking on them, they work fine and they don't hack you.

The thing is with these other bots is that they are closed source, meaning we can't look at the code to verify whether or not they have malicious capability's. So with that people are right to have suspicions because it's unknown until it happens.

Anyway's I'd have to agree with you on some aspects of what you said, the scripts are super stable usually and run right until the session timeout (RSBot, epicbot ect..) but all bots have their pros and cons.

Lol I actually found this thread on google, by looking up why they force you to use their installer and can't use their .jar..

they have a .jar that works fine in Linux, it works once on windows then after that you get an error that tells you to use their "installer.exe" I thought that was kind of silly, so I googled and found this thread :P

I figured they had more ads and trash that would install, guess I'll stick to using it on linux

can we lock this or something?

wow, i feel like I've just read a thread written by a bunch of downy 12 y/o's. i actually script for Epicbot (i'm a scripter) and can tell you for a fact it doesn't have viruses / malware / trojans / steal / hack your accs. if you want to use it without installing it download the Linux version and run that. other then that people download stuff off youtube and then get hacked and point the finger at anyone, if you want to talk about a bot that actually has hacked people and it's been proven they have look at rsbot / powerbot - (quickly googled it and found this link) http://www.robotzindisguise.com/forum/showthread.php?4763-PowerBot.org-An-Explanation-of-the-Largest-RuneScape-Hacking-to-Date

I started an account from scratch. Used powerbot, never shared password with anyone. Never had a single virus. got hacked??
I started an account from scratch. Used Epicbot, never shared password with anyone. Never had a single virus. got hacked??
I started an account from scratch using Simba. Now 2100+ total, not a single security problem. Not even once, I haven't even got a single mark from botting or anything. Thats proof of how amazing and trustworthy Simba is.

From: wildkilla
wow, i feel like I've just read a thread written by a bunch of downy 12 y/o's. i actually script for Epicbot (i'm a scripter) and can tell you for a fact it doesn't have viruses / malware / trojans / steal / hack your accs. if you want to use it without installing it download the Linux version and run that. other then that people download stuff off youtube and then get hacked and point the finger at anyone, if you want to talk about a bot that actually has hacked people and it's been proven they have look at rsbot / powerbot - (quickly googled it and found this link) http://www.robotzindisguise.com/forum/showthread.php?4763-PowerBot.org-An-Explanation-of-the-Largest-RuneScape-Hacking-to-Date

Well, this post is really an unbiased source of info.