Underlight Discord Chat: http://discord.underlight.com/
Production Server: Online (Version 3.1.15)
Player Test Realm Server: Offline (Version 3.1.15)
Production Server: Online (Version 3.1.15)
Player Test Realm Server: Offline (Version 3.1.15)
Trojan
- Inzoum
- Dreamer
- Posts: 202
- Joined: Wed Jul 13, 2016 5:32 pm
- Character Name(s): Inzoum Zimia, Asaniel
- Location: Belgium
- Contact:
Re: Trojan
Avast free antivirus doesn't like it either, it blocked the download from download.underlight.com (added it to whitelist), then gave some warnings on install but didn't try to block it outright
Inzoum Carrere Zimia
6th Sphere GateKeeper of the Lyran City, Dream Traveler
6th Sphere GateKeeper of the Lyran City, Dream Traveler
- Koi-JorKyrin
- System Administrator
- Posts: 264
- Joined: Sat Feb 01, 2014 6:33 pm
Re: Trojan
Izoum & Kelos,
Afternoon dreamers!
Yea this has to do with the fact the underlight.exe pmare.exe executables have the ability to http refer if you have the incorrect version of Underlight client. It will auto send you to https://download.underlight.com/ (directly opening the browser to the executable URL) to pull down the latest installer. AV clients do not like that and of course label that behavior as generic Trojan. This has been in the client for awhile and is likely not a best practice, so I'm going to remove that bit. Now days the AV companies share the same virus database thus the reasoning for it being an issue on multiple AV clients all the sudden.
Sorry for the scare. I can assure you we have nothing malicious in the source =)
Afternoon dreamers!
Yea this has to do with the fact the underlight.exe pmare.exe executables have the ability to http refer if you have the incorrect version of Underlight client. It will auto send you to https://download.underlight.com/ (directly opening the browser to the executable URL) to pull down the latest installer. AV clients do not like that and of course label that behavior as generic Trojan. This has been in the client for awhile and is likely not a best practice, so I'm going to remove that bit. Now days the AV companies share the same virus database thus the reasoning for it being an issue on multiple AV clients all the sudden.
Sorry for the scare. I can assure you we have nothing malicious in the source =)
Koi - Jor'Kyrin
System Administrator
KoiWare, LLC
System Administrator
KoiWare, LLC
- Inzoum
- Dreamer
- Posts: 202
- Joined: Wed Jul 13, 2016 5:32 pm
- Character Name(s): Inzoum Zimia, Asaniel
- Location: Belgium
- Contact:
Re: Trojan
Didn’t think it was truly malicious XD
As someone who enjoys a good fight against a virus I know I had coming from downloading dodgy content (and I usually prevail), I can tell a false positive from a legitimate threat XD
thanks for the explanation!
As someone who enjoys a good fight against a virus I know I had coming from downloading dodgy content (and I usually prevail), I can tell a false positive from a legitimate threat XD
thanks for the explanation!
Inzoum Carrere Zimia
6th Sphere GateKeeper of the Lyran City, Dream Traveler
6th Sphere GateKeeper of the Lyran City, Dream Traveler