PSA: Trojan from MapleRoyals 2019/04/12
[removed]
Posted Apr 12, 2019, 3:23 PM UTC · edited
920
Not defending MapleRoyals but private servers usually have false positives. This one could be a real trojan but usually it's nothing to worry about, with that being said I almost always recommend playing private servers in a VM.
3
Ya I thought about the possibility of a false positive. a VM is a very good recommendation. Thank you.
0
happened to me too with maplelegends. i just decided not to bother it but a VM is a good idea.
1
This could be a false positive but I don't know.
2
just about every modified client will trigger your AV. It's up to you to decide whether you want to install it or not.
1
I have had opposite experiences. Most do not trigger. From what I have seen, about 2 out of 10 will trigger and its usually the less popular ones that do trigger.
-3†
I'll scan the Google Drive download with Malwarebytes and let you know what I find.
Edit:
Malwarebytes www.malwarebytes.com
-Log Details- Scan Date: 4/12/19 Scan Time: 11:49 AM Log File: fda8f83a-5d42-11e9-8ace-1c1b0de6605d.json
-Software Information- Version: 3.7.1.2839 Components Version: 1.0.563 Update Package Version: 1.0.10132 License: Premium
-System Information- OS: Windows 10 (Build 17763.379) CPU: x64 File System: NTFS User: Redacted
-Scan Summary- Scan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 1 Threats Detected: 0 Threats Quarantined: 0 Time Elapsed: 0 min, 2 sec
-Scan Options- Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect
-Scan Details- Process: 0 (No malicious items detected)
Module: 0 (No malicious items detected)
Registry Key: 0 (No malicious items detected)
Registry Value: 0 (No malicious items detected)
Registry Data: 0 (No malicious items detected)
Data Stream: 0 (No malicious items detected)
Folder: 0 (No malicious items detected)
File: 0 (No malicious items detected)
Physical Sector: 0 (No malicious items detected)
WMI: 0 (No malicious items detected)
(end)
1
Ah interesting. Ill give it some thought. Might delete this post now that this has been provided. Ill do my own scan sometime. Might keep this up in case anyone else is concerned about it.
1
It's good to always be wary of modified clients.
1
Literally isn't possible unless the games in question are not edited at all on the executable level. Anything unsigned will trigger a false positive. If you want to dabble in grey market stuff like private servers, you have to be smarter than "My AV says this is bad" and less stupid than "I will run anything on my computer".
1
I've downloaded MapleLegends, SlimeTales and Croosade. Non of them came up with any triggerable files when scanned. I have also dabbled in runescape and wow private servers as well.
Anything unsigned will trigger a false positive
Not true. Highly dependent on many variables such as AV, OS, group policies, administrative status, etc.
you have to be smarter than "My AV says this is bad" and less stupid than "I will run anything on my computer"
You didn't read my post.
2
Anything unsigned will trigger a false positive
Nothing you said refutes this. Runescape and WoW private servers don't need to edit the executables to work.
1
Welp, someone just downvoted this post and every one of my comments. hmmm. I would like to know why if you are monitoring this thread.
-1
I didn't downvote but I disagree with the post entirely. Creating a PSA post, without actual proof that's not a false positive. Before assuming the detection is truly malicious, research a bit more and identify what the virus is really doing.
Like others mentioned, a lot of private servers for many games have had false positives.
3
Creating a PSA post, without actual proof that's not a false positive.
Proof has now been provided that it is most likely a false positive. I have made an edit.
Before assuming the detection is truly malicious, research a bit more and identify what the virus is really doing.
I did... >Thankfully Occamy.C is a well known Trojan and well documented on the internet.
Like others mentioned, a lot of private servers for many games have had false positives.
Yes, I am fully aware of this as stated in previous comments.
2
Fair enough :)
2
Maple story and viruses, name a better duo
Perfect World private servers and DDoSing.
Trion Worlds and "no tricks no traps" cash shop.
[removed]