HELP please. I have been using mirror mode for a while now and all of a sudden when I went to use my bot this morning my antivirus kicks up and says potential threats are being cleaned whenever I launch mirror mode and it tries to find a client to attach to. What is causing this? the antivirus is saying it's * Local\Temp\qqq4789902555908740287.dll *

 

• The only thing i did differently yesterday was download a gnome agility script from the forums. Wasn't in SDN. Worked fine. got me to level 21. Now when I try to start a bot though some virus thing starts up and it won't work.
•  
  I delete it every time but each time I start the bot back up there's a new file to be deleted and my bot just says *Could not load stream library*

 

So I have deleted all file extensions with long ass names like that in my temp folder. Also allowed the osbot folder through my virus detection and it's still saying  *threat detected and cleaning* or whatever and then the bot fails because *could not load stream library* 
What is causing this issue and how do I fix it? I have been botting just fine for the past month now all of a sudden this?

Operating System?

Anti-virus?

OS is windows 7. I have been running mirror mode just fine for the past week or 2 (just recently purchased vip) it was only just this morning when I wanted to boot a bot up that I end up with this issue.

*loading stream_32.dll* and then my antivirus shows up saying threat detected and then *could not load stream library*

So this is all the shit I have deleted so far that it says is a threat. There's just more and more.. It doesn't stop. Basically each time I start the bot up some more of it gets created and then antivirus shows up and bot stops working. 

Anyone have a fix at all? Or know what is causing the .dll virus thing?

So I'm getting really annoyed right now. Every single time I try to run it in mirror mode the virus thing pops up saying threat detected and then the bot doesn't work. 
The issue is a trojan:win32/rundas!plock thing which is only coming up each time I run the bot in mirror mode and it gets to the *loading stream_32.dll* part. It says the item is located in the provided picture... But when I go to that location there is nothing there! What the crap guys!? I have view all files and folders or w/e it's called. *view invisible files* So what am I missing and why is this happening?

It's like something is being run as soon as mirror mode is activated and then sends files to the temp folder. I don't know what it is that creates them or where it is located though. No idea what to do.

I have the exact same problem, but windows defender from windows 10 blocks it

This is the error I get:

[DEBUG][06/18 08:26:20 AM]: OSBot is now ready!

[iNFO][06/18 08:26:21 AM]: Loaded 2 RS accounts!

[iNFO][06/18 08:26:22 AM]: Welcome to OSBot 2.4.68!

[iNFO][06/18 08:26:57 AM]: Updated injection hooks for client revision : 116!

[DEBUG][bot #1][06/18 08:26:57 AM]: Initializing mirror client bot...

[ERROR][bot #1][06/18 08:26:59 AM]: nattachfail

java.lang.RuntimeException: s3

at client.bzAE.bfu(Unknown Source)

at client.fg.zrst(Unknown Source)

at client.emu.bN.run(Unknown Source)

Caused by: java.lang.UnsatisfiedLinkError: C:\Users\Cold\AppData\Local\Temp\qwe1324830423006317277.dll: De bewerking is niet voltooid omdat het bestand een virus of mogelijk ongewenste software bevat

at java.lang.ClassLoader$NativeLibrary.load(Native Method)

at java.lang.ClassLoader.loadLibrary0(Unknown Source)

at java.lang.ClassLoader.loadLibrary(Unknown Source)

at java.lang.Runtime.load0(Unknown Source)

at java.lang.Runtime.load(Unknown Source)

... 3 more

[ERROR][bot #1][06/18 08:27:03 AM]: legacyload

java.lang.ClassNotFoundException: com.sun.tools.attach.spi.AttachProvider

at java.lang.ClassLoader.findClass(Unknown Source)

at java.lang.ClassLoader.loadClass(Unknown Source)

at java.lang.ClassLoader.loadClass(Unknown Source)

at org.osbot.AA.loadClass(jq:272)

at java.lang.Class.forName0(Native Method)

at java.lang.Class.forName(Unknown Source)

at client.ICd.<clinit>(Unknown Source)

at client.bzAE.pky(Unknown Source)

at client.bzAE.cds(Unknown Source)

at client.nat.stream.Stream.bfu(Unknown Source)

at client.fg.zrst(Unknown Source)

at client.emu.bN.run(Unknown Source)

[ERROR][bot #1][06/18 08:27:03 AM]: Could not load stream library

java.lang.RuntimeException: Could not load stream library

at client.nat.stream.Stream.bfu(Unknown Source)

at client.fg.zrst(Unknown Source)

at client.emu.bN.run(Unknown Source)

Caused by: java.lang.RuntimeException: s2

... 3 more

 

A temporary fix : just disable your anti-virus

That works for me ^^

Edited June 18, 20169 yr by dewildevis1

I would really rather not disable antivirus. Considering it was working just fine for days before. Now all of a sudden I get this. 

So does anyone have any idea why whenever I run the bot in mirror mode now it fails at *could not load stream library* because of a *trojan:win32/rundas!plock* being created each time the client gets to that point? Surely something's not right and has to be something simple right? I mean it was working fine for the past few days. What is happening for it to do this? I don't want to allow the issue through my firewall when it wasn't an issue earlier..?

I have the same.

Problem solved for now I guess... I just allowed file extensions *.dll* through my firewall. so hopefully that won't screw me over in the long run. Mirror mode working fine again now though.

I'm not comfortable doing the same, but good luck to you ^^

I asked you two very simple and specific questions.

 

Operating System?

Anti-virus?

 

 

You responded with your operating system, you did not tell me the anti-virus you were using.

I asked you two very simple and specific questions.

 

 

 

You responded with your operating system, you did not tell me the anti-virus you were using.

 

If you look at the pictures like with what i quoted to you earlier, he is using MSE (Microsoft Security Essentials)

I asked you two very simple and specific questions.

 

 

 

You responded with your operating system, you did not tell me the anti-virus you were using.

 

I'm on windows 10 and my windows defender comes up with the same as the OP.

Thank you, we will look into it.