Agent.exe

Agent.exe and MSINFO File

Question for you guys since it looks like Blizz have their agent.exe scanning our pc's why don't we just create a outgoing firewall rule to deny agent.exe from exiting our pc's?

Also guys if ever you need to contact Blizz for support concerning the game client acting funny and they ask for you to send a MSINFO from your PC please please think twice as that file will automatically tell Blizz that you are running HB even if you closed HB or even if you do a reboot look below is an example of what they will see in that file:

****************************
4/10/2015 3:14 PM Application Hang The program Honorbuddy.exe version 2.5.13431.781 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: b540
Start Time: 01d073a0d99b19e8
Termination Time: 10
Application Path: D:\Documents\Honorbuddy\Honorbuddy.exe
&#x0 00a; Report Id: 37f138a0-df94-11e4-825f-902b34daaf8e
Faulting package full name:
Faulting package-relative application ID:

****************************


The only way to wipe all that info before sending the MSINFO and DXDiag is to go in Administrative Tools --> Event Viewer --> Windows Logs then Right click on each Application/Security/System and select Clear Logs.

Then relaunch the Wow client to get back the error then you can send them the MSINFO without no worries then all they will see is their stuff like this example:

*****************************
4/10/2015 3:14 PM The program Wow.exe version 6.1.2.19865 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: ee8
Start Time: 01d0ade7a0b73dcf
Termination Time: 109
Application Path: C:\Users\******\Saved Games\World of Warcraft\Wow.exe
Report Id: efcb7570-19da-11e5-826d-902b34daaf8e
Faulting package full name:
Faulting package-relative application ID:

******************************
So be smart before sending them those files as they are not stupid and they know that all that info stays in the logs and that alot of WoW Player has no clue on this file

Thought of sharing this info with you guys to eliminate unnecessary Bans.

Take care all!

 

good tip, anyone can confirm that blocking agent.exe will still run the game fine before i do that?

 

Yup game runs fine with that and even battlenet blocked. Obviously for patches etc you have to allow it back through.

Even running the direct wow exe with the 32-bit flag still launches agent.exe which to me was suspicious. [edit read roboto's post showing its harmless but ill keep it blocked just coz it can scan wow folders so perhaps be told to occasionally scan further in secret aka malwareish??)

I did notice that I cant buy anything in the in game store though as i guess agent.exe is used for that.

For the last few weeks 'ive actually been running a free eval of this - http://www.novirusthanks.org/

It wont allow any exe to run without my consent. It was a bit of a pain to setup (whitelisting to many windows apps etc). It also pops up all the flipping time but ive managed to get it down to 2 or 3 popups from when I first start up PC to being able to use it (whitelisting parent dosent seem to work for everything).

Yea its overkill, yea prob 99% inst needed but I use it just now to stop agent and battlenet even being allowed to load up.

Dont go near it though if you aren't very tech savvy.

 

Run wow . exe directly... Not run bat***net... This avoids any agent run...

 

https://www.thebuddyforum.com/honorbuddy-forum/218871-agent-exe.html if you search the forums.