CoolAid Posted March 18, 2021 Share Posted March 18, 2021 (edited) Hello, Ik tried updating Renegade X today and my Malwarebytes Premium showed me a message and blocked an outbound connection for the reason "Trojan". It could be possible there is an infection in the website. Maybe even de game update (i doubt this, but it's not impossible for some developer having an infected/hacked computer)? It didnt give this message on all previous updates that where downloaded. I have Malwarebytes Premium running for years. I stopped the download of the update as a precausion. Please investigate this matter. Edited March 18, 2021 by CoolAid Quote Link to comment Share on other sites More sharing options...
Totem Arts Staff NodSaibot Posted March 18, 2021 Totem Arts Staff Share Posted March 18, 2021 17 minutes ago, CoolAid said: Hello, Ik tried updating Renegade X today and my Malwarebytes Premium showed me a message and blocked an outbound connection for the reason "Trojan". It could be possible there is an infection in the website. Maybe even de game update (i doubt this, but it's not impossible for some developer having an infected/hacked computer)? It didnt give this message on all previous updates that where downloaded. I have Malwarebytes Premium running for years. I stopped the download of the update as a precausion. Please investigate this matter. The website and patch mirrors are completely separate, and it's highly unlikely that it would even be able to detect that there was a virus in the patch data, considering it's all in a delta format. The launcher doesn't even download any "regular" files. Unless your antivirus is actively unpacking all the delta files (what the launcher does in the apply phase, partially), I would say it's a false positive. We will look anyway, but that one is actually one of the newest patch servers, so I highly doubt anything could be wrong with it. Quote Link to comment Share on other sites More sharing options...
CoolAid Posted March 18, 2021 Author Share Posted March 18, 2021 (edited) I think it's the "Web protection" feature of Malwarebytes. This one sometimes blocks websites/IPs that host infected files (or have been hosting in the past). When I visit the website https://multiplayerforums.com/ the "Web protection" feature of Malwarebytes also warns about a trojan. Probably because one of the downloads there might be infected or it has links to infected downloadable files. Ofcourse it could be false positives. But for me there is no way to know for sure. Edited March 18, 2021 by CoolAid Quote Link to comment Share on other sites More sharing options...
Totem Arts Staff Cronus Posted March 18, 2021 Totem Arts Staff Share Posted March 18, 2021 Complete false positives. Malwarebytes has a database of IP Addresses that were probably bad at one point. They could also have marked an IP bad and it was not. We verify very file you download so they have not been tampered with. Same with our site MPF (I'm an admin at MPF) Thats just gs4u.net what we use to show some ingame stats on our website. 1 1 Quote Link to comment Share on other sites More sharing options...
DutchNeon Posted March 18, 2021 Share Posted March 18, 2021 Interesting that it detects it as a Trojan. Probably due an outgoing connection hence it detect it as a backdoor attempt what Trojans tend to do. Threw the 2 domains in a couple of malware DB websites (URLVOID, VirusTotal and Google transparencyreport) but they didn't find anything. Probably false positives. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.