Recent Topics

Ads

launching War.exe - Virus detected

Problems installing or downloading the game? Check the Install Guide first.
Forum rules
READ THE INSTALL GUIDE BEFORE YOU POST IN THIS SUBFORUM.

The stickies exist to handle common queries. Save our time and yours by reading them first.

Thank you.
TayEll1391
Posts: 2

launching War.exe - Virus detected

Post#1 » Thu May 21, 2020 10:29 am

Hey all;

Played fine last night, got home from work tonight and tried to logon but getting an error War.exe has encountered a critical error - Virus :(

this goes straight to my virus protection program and I am unable to run the game now, more or less giving me two options- #1:Quarantine folder
#2: Delete program

Anyone else had this issue? pretty damn annoying considering I ran it not 24hrs ago.

Thanks again.




EDIT - Ive read some posts in the forum and ive just gone ahead and ignored the threat warning, ran as administrator and its working - pray I don't wake up tomorrow with a computer full of porn.

Skazgrul - 40 Choppa

Ads
Salmisrah
Posts: 2

Re: launching War.exe - Virus detected

Post#2 » Thu May 21, 2020 4:44 pm

Spoiler:
Also in RoRUpdate.exe is a Backdoor Trojaner " Win32/Occamy.C " which is blocked ba Antivirus .
Seems with many new player it is interesting to get some Passwords ore Code for Credit-Cards .
Take care !!! Maybe it is better to wait for a new and clean version of RoRUpdate , then get infected by a Trojan/Virus !!!
This is already explained in the install guide

Notes about Antivirus programs, Firewalls, Hardware Routers, and other security programs

Some of these can be more aggressive than others, and in particular the RORLauncher has been flagged in the past. Partially because this is not a well known application in the wild, and partially because of how it works.
The Launcher manipulates objects in memory to make the game work with our server.
Some aggressive antiviruses automatically deem this to be virus-like behavior.
They check with their database of approved applications when they see this, and if they don't find our application in there, it gets a Generic flag and is sometimes blocked or damaged.

Because of this, we have to recommend that when you download with the Torrent, that you have your security disabled, and then whitelist the folder before turning it all back on.

We have repeatedly reached out to many AV companies and databases, all of which who responded accepted it as clean, and many others simply never responded leaving it with that Generic tag.

TL;DR - The RORLauncher is safe. The torrent is safe. Please disable your AV BEFORE downloading, and whitelist the folder BEFORE turning it back on to prevent any potential issues.

User avatar
Kaelang
Posts: 1275

Re: launching War.exe - Virus detected

Post#3 » Thu May 21, 2020 4:50 pm

Salmisrah wrote: Thu May 21, 2020 4:44 pm Also in RoRUpdate.exe is a Backdoor Trojaner " Win32/Occamy.C " which is blocked ba Antivirus .
Seems with many new player it is interesting to get some Passwords ore Code for Credit-Cards .
Take care !!! Maybe it is better to wait for a new and clean version of RoRUpdate , then get infected by a Trojan/Virus !!!
How about not scaremongering people unnecessarily? The Install Guide has always explained in full detail as to why AV's are over-zealous about the Launcher. And in a recent patch it was tweaked and updated, which re-prompted AV's to flag it once again. The RoRUpdater / RoRRepair was also introduced in this patch, working in a similar way to the Launcher.
DiscordFacebookTwitterInstagram

I play around with Social Media, troll our players on Discord and officially hate anyone who plays a dwarf.

Psilord
Posts: 31

Re: launching War.exe - Virus detected

Post#4 » Fri May 22, 2020 11:14 am

Kaelang wrote: Thu May 21, 2020 4:50 pm
Salmisrah wrote: Thu May 21, 2020 4:44 pm Also in RoRUpdate.exe is a Backdoor Trojaner " Win32/Occamy.C " which is blocked ba Antivirus .
Seems with many new player it is interesting to get some Passwords ore Code for Credit-Cards .
Take care !!! Maybe it is better to wait for a new and clean version of RoRUpdate , then get infected by a Trojan/Virus !!!
How about not scaremongering people unnecessarily? The Install Guide has always explained in full detail as to why AV's are over-zealous about the Launcher. And in a recent patch it was tweaked and updated, which re-prompted AV's to flag it once again. The RoRUpdater / RoRRepair was also introduced in this patch, working in a similar way to the Launcher.
But AV-Programm did not have detected a virus/trojan in War.exe the last few years !!! It detected it NOW , since something has been changed .
Why should someone use a AV is he cannot beleve the Programm , only cause someone in the world say that this is a hoax ??? I dont know you , and dont know your training , which makes you to a Virus professional !
But I know that many REAL Experts are working on the AV-Software , and they dont have a advantage finding a virus in War.exe . They searching to a knowen code wich is used in Virus/Trojans , and is well knowen , and if they detect this code in any knowen or unknowen Programm-File , they report it .
Its not like playing a lottery !

User avatar
Kaelang
Posts: 1275

Re: launching War.exe - Virus detected

Post#5 » Fri May 22, 2020 11:32 am

Psilord wrote: Fri May 22, 2020 11:14 am
Kaelang wrote: Thu May 21, 2020 4:50 pm
Salmisrah wrote: Thu May 21, 2020 4:44 pm Also in RoRUpdate.exe is a Backdoor Trojaner " Win32/Occamy.C " which is blocked ba Antivirus .
Seems with many new player it is interesting to get some Passwords ore Code for Credit-Cards .
Take care !!! Maybe it is better to wait for a new and clean version of RoRUpdate , then get infected by a Trojan/Virus !!!
How about not scaremongering people unnecessarily? The Install Guide has always explained in full detail as to why AV's are over-zealous about the Launcher. And in a recent patch it was tweaked and updated, which re-prompted AV's to flag it once again. The RoRUpdater / RoRRepair was also introduced in this patch, working in a similar way to the Launcher.
But AV-Programm did not have detected a virus/trojan in War.exe the last few years !!! It detected it NOW , since something has been changed .
Why should someone use a AV is he cannot beleve the Programm , only cause someone in the world say that this is a hoax ??? I dont know you , and dont know your training , which makes you to a Virus professional !
But I know that many REAL Experts are working on the AV-Software , and they dont have a advantage finding a virus in War.exe . They searching to a knowen code wich is used in Virus/Trojans , and is well knowen , and if they detect this code in any knowen or unknowen Programm-File , they report it .
Its not like playing a lottery !
I replied in another post, where you put pretty much the exact same. See spoiler:
Spoiler:
If you choose to believe your over-zealous AV pulling file names that don't exist from files they don't recognise - over a team of people who have been running a successful, completely free to play passion project, then that's absolutely fine. You don't need to run the Launcher, and we aren't forcing you to play the game.

You came here for advice - the advice has been given. If you would rather not play based on the AV flagging the file, that's completely your choice.

There's only so many times we can say it's fine to someone.
However - to address this here. The reason the AV has flagged now, over the past few years, is 2/3 patches ago the Launcher was updated, and any updated files cause a re-scan by AV's, which is where the trigger came in.
DiscordFacebookTwitterInstagram

I play around with Social Media, troll our players on Discord and officially hate anyone who plays a dwarf.

Who is online

Users browsing this forum: No registered users and 61 guests