ROR Launcher Virus

[Jakel]

This morning, my system ran RoRUpdater, and Defender keeps detecting a virus in the launcher.

Trojan:Win32/Wacatac.C!ml

[Kaelang]

Notes about Antivirus programs, Firewalls, Hardware Routers, and other security programs
Spoiler:
Some of these can be more aggressive than others, and in particular the RORLauncher has been flagged in the past. Partially because this is not a well known application in the wild, and partially because of how it works.
The Launcher manipulates objects in memory to make the game work with our server.
Some aggressive antiviruses automatically deem this to be virus-like behavior.
They check with their database of approved applications when they see this, and if they don't find our application in there, it gets a Generic flag and is sometimes blocked or damaged.

Because of this, we have to recommend that when you download with the Torrent, that you have your security disabled, and then whitelist the folder before turning it all back on.

We have repeatedly reached out to many AV companies and databases, all of which who responded accepted it as clean, and many others simply never responded leaving it with that Generic tag.

As you can see here VirusTotal which is a very common database, is showing the launcher as clean in the vast majority of AV's. However, old definitions even from a company that doesn't have us flagged, can still cause problems.

TL;DR - The RORLauncher is safe. The torrent is safe. Please disable your AV BEFORE downloading, and whitelist the folder BEFORE turning it back on to prevent any potential issues.

[Brut]

Take note: Your anti virus may also quarantine RORLauncher and RORUpdater. They were missing from the install folder. You will have to go into your AV and restore them to get them back into the folder to update again.