Page 2 of 2
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Wed May 09, 2018 7:40 am
by saupreusse
Hargrim wrote: Wed May 09, 2018 4:32 am
satcom9 wrote: Tue May 08, 2018 11:31 pm
I just downloaded the torrent and launched the launcher and hit update like Op and I do indeed get the same exact win def flag as OP about the Occamy file.
Whitelist whole game folder.
I just checked everything once more and googled a bit. Seems like its simply windows defender being unhappy with the RoRlauncher for whatever reason. It is in fact a false alarm. Had no problem using different Anti virus software. Can be locked
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Wed May 09, 2018 9:12 am
by Hargrim
It's most likely unhappy with RoRUpdater.exe that is DLed when you run RoRLauncher.exe
We are aware of this and in some time this thing will go away.
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Thu May 17, 2018 3:05 am
by Ramielle
If you use Windows Defender, just set the game folder as an exception and it will update and run just fine. That's what I did and I've had no problems since.
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Wed May 23, 2018 5:16 pm
by Flavorburst
It's safe. It shows up as a false positive because it's unsigned, which is considered a red flag irrespective of the contents of the exe (or code in general).
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Wed May 23, 2018 5:40 pm
by Haskr
Fyckle wrote: Wed May 23, 2018 5:06 pm
Definitely not safe. Someone on this team is being naughty. If you've been playing this project recently, be very careful.
Definitely a trash account. Someone on another server using stolen code is being naughty. If you've been playing on that "server" recently, be very careful.
Re: Windows Defender found Trojan:Occamy.b in RoRLauncher
Posted: Fri Jun 01, 2018 2:07 am
by Pikavangelist
For those who care, rorupdater.exe shouldn't be flagged as a trojan by Windows Defender as of the next definition update.
If this happens again, it's worth keeping in mind that a lot of AV companies have forms or other methods to submit files that are being incorrectly flagged as malware. I've included some relevant links below.
https://www.microsoft.com/en-us/wdsi/filesubmission
https://www.avast.com/en-us/false-posit ... e-form.php
https://submit.symantec.com/false_positive/
https://service.mcafee.com/webcenter/po ... d=TS102053
https://support.malwarebytes.com/docs/DOC-1164