Windows Defender found Trojan:Occamy.b in RoRLauncher

[saupreusse]

I just downloaded the torrent and launched the launcher and hit update like Op and I do indeed get the same exact win def flag as OP about the Occamy file.

Whitelist whole game folder.

I just checked everything once more and googled a bit. Seems like its simply windows defender being unhappy with the RoRlauncher for whatever reason. It is in fact a false alarm. Had no problem using different Anti virus software. Can be locked

[Hargrim]

It's most likely unhappy with RoRUpdater.exe that is DLed when you run RoRLauncher.exe

We are aware of this and in some time this thing will go away.

[Ramielle]

If you use Windows Defender, just set the game folder as an exception and it will update and run just fine. That's what I did and I've had no problems since.

[Flavorburst]

https://www.virustotal.com/#/file/a888e ... /detection


Definitely not safe. Someone on this team is being naughty. If you've been playing this project recently, be very careful.

It's safe. It shows up as a false positive because it's unsigned, which is considered a red flag irrespective of the contents of the exe (or code in general).

[Haskr]

Definitely not safe. Someone on this team is being naughty. If you've been playing this project recently, be very careful.

Definitely a trash account. Someone on another server using stolen code is being naughty. If you've been playing on that "server" recently, be very careful.

[Pikavangelist]

For those who care, rorupdater.exe shouldn't be flagged as a trojan by Windows Defender as of the next definition update.

If this happens again, it's worth keeping in mind that a lot of AV companies have forms or other methods to submit files that are being incorrectly flagged as malware. I've included some relevant links below.

https://www.microsoft.com/en-us/wdsi/filesubmission
https://www.avast.com/en-us/false-posit ... e-form.php
https://submit.symantec.com/false_positive/
https://service.mcafee.com/webcenter/po ... d=TS102053
https://support.malwarebytes.com/docs/DOC-1164