Underlight Discord Chat: http://discord.underlight.com/
Production Server: Online (Version 3.1.8)
Player Test Realm Server: Online (Version 3.1.9 - Public Testing)

Installer Issue Still

Please list bugs discovered here. BE AS SPECIFIC AS POSSIBLE IN DESCRIBING THE ERROR.
Post Reply
User avatar
Butterfly
House of Calenture
Posts: 504
Joined: Sun Jul 26, 2015 9:22 pm
Character Name(s): Arlyana Jax

Installer Issue Still

Post by Butterfly » Sat Nov 03, 2018 11:36 pm

The installer, even the newest one, is still showing up as a virus.
Arlyana Jax Shaw
Sovereign of Stuffing
Eternal Calenturian

Uthanatos: I don't know what you are talking about, that's not a woman, it's an AJ
User avatar
Koi-JorKyrin
System Administrator
Posts: 193
Joined: Sat Feb 01, 2014 6:33 pm

Re: Installer Issue Still

Post by Koi-JorKyrin » Mon Nov 05, 2018 8:40 am

Butterfly,

Good morning,

Please provide more information such as what type of Anti-virus application you use, as well as what it is labeling the the installer as? (ie. Trojan? Some other type?) Also at what point is it alerting you during the process? At installation? Or at the time of running the application?

Thanks!
Koi - Jor'Kyrin (Ducky)
System Administrator
KoiWare, LLC
User avatar
Koi-JorKyrin
System Administrator
Posts: 193
Joined: Sat Feb 01, 2014 6:33 pm

Re: Installer Issue Still

Post by Koi-JorKyrin » Tue Nov 06, 2018 2:56 pm

I did some of my own research on this to help set minds at ease here. Also I'd like to turn this thread into a UL Community research thread for this specific topic as KoiWare takes these types of reports very seriously.

------- Virus Total Scans --------

I submitted the underlight-setup.exe installer file to virustotal.com for scanning and this was the result:
https://www.virustotal.com/#/file/e6baf ... /detection

1 of 66 anti-virus firms marked it as malware. 65 come back as clean, this is good! ------ When looking up "HEUR/QVM07.1.07F9.Malware.Gen" which was reported by Qihoo-360 (never heard of this anti-virus firm before, Chinese?) it was stated to be a potentially un-wanted program (PUP) which had nothing more for an explanation than that.

--

I also ran the underlight.exe and pmare.exe files through virustotal.com and this was the result:
https://www.virustotal.com/#/file/641e8 ... /detection
https://www.virustotal.com/#/file/96a8f ... /detection

1 of 67 anti-virus firms reported "RiskTool.BitCoinMiner.itb". 66 come back as clean, again, this is a good thing! ------ I can certainly state that there is no bit coin miner in our software and or installer. it was a strange anti-virus company named "Jiangmin" that reported this, which is a false positive for certain.

--

To be double sure, I ran our Install Creator ic.exe executable through the virus total and it came up with 0/67 for detections:
https://www.virustotal.com/#/file/f199f ... /detection

The machine used for compiling the Underlight software is regularly scanned for malware on a continuous basis with three different anti-virus programs, Sophos Home, Hitman Pro, and adwcleaner.


--

Conclusion, if you check out the scan links you'll noticed of the several green checks showing as clean, there are major anti-virus companies listed here. Hopefully this sets the minds of many at ease if you are worried about this. In this day and age, we should be vigilant!

Regards,
Koi - Jor'Kyrin (Ducky)
System Administrator
KoiWare, LLC
User avatar
Arnaya
WordSmith
Posts: 929
Joined: Mon Aug 03, 2015 2:25 am
Character Name(s): Arnaya

Re: Installer Issue Still

Post by Arnaya » Tue Nov 06, 2018 10:21 pm

Very nice research Jor, good due dilligence there as well. I'll see if I can get AJ or her Hubby to give you more precise details about what she keeps getting :)
The most important lesson I've learned over this past year, is not to let anyone make you cruel. No matter how badly you want to give the world a taste of it's own bitter medicine, it is never worth losing yourself.
User avatar
Brother Timothy
Dreamer
Posts: 26
Joined: Mon Mar 10, 2014 7:33 pm

Re: Installer Issue Still

Post by Brother Timothy » Mon Nov 12, 2018 1:16 pm

If it is any help my antivirus flagged underlight-webinstaller.exe as having "Program:win32/Unwaders.C!ml" and quarantined it. Now I manually download the updates.
User avatar
Koi-JorKyrin
System Administrator
Posts: 193
Joined: Sat Feb 01, 2014 6:33 pm

Re: Installer Issue Still

Post by Koi-JorKyrin » Mon Nov 12, 2018 3:30 pm

Afternoon Brother Timothy,

Soon we will be using Steam for Underlight's installation and auto-patching platform. There won't be an installer at that point to cause anyone anti-virus client interference moving forward. Depending on how well received the release is on Steam, and how many people migrate there for their installation and automatic updates needs, I may abandon the Creator installers all together. I mean, automatic updates? Doesn't get better than that! The down side is some may not be up to speed with how Steam works and why they need to sign up for it to play the game. So, we will see!

Anyways, just a side note that the old underlight-webinstaller.exe installer was deprecated. I am not surprised that it is being labeled as a trojan due to what was explained here ( viewtopic.php?f=22&t=5452 ). For now, the latest is underlight-setup.exe. Do you also get virus scan reports from this executable as being a trojan as well?

Latest installer can be found here: http://download.underlight.com/

Regards,
Koi - Jor'Kyrin (Ducky)
System Administrator
KoiWare, LLC
Post Reply