Trojan Ymacco.AAF7 spawning in Temporary folder

Discussion in 'Closed' started by PosterYellow, Mar 10, 2021.

  1. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Hello Sirs,

    In this recent update, I have been getting this particular Trojan virus spawning in my Temp folder (C:\Windows\Temp). Usually, it would appear in pairs with similar naming e.g. (Tmp8229.tmp/ TmpD004.tmp). (Happening daily usually once)

    Folder Directory: C:\Windows\Temp
    Does anyone shares a similar issue? Would like to confirm if this virus is a result of Mapleroyals' client/set up and if it is a false positive.
     

    Attached Files:

    • 2.PNG
      2.PNG
      File size:
      11.9 KB
      Views:
      90
    • 1.PNG
      1.PNG
      File size:
      11.9 KB
      Views:
      79
    • 3.PNG
      3.PNG
      File size:
      17.5 KB
      Views:
      81
    Niven likes this.
  2. Gro
    Offline

    Gro Member

    Joined:
    May 30, 2019
    Messages:
    1
    Likes Received:
    1
    Gender:
    Female
    Country Flag:
    IGN:
    Margaretka
    Level:
    165
    My BF found this on my laptop. Red lines show what and where was found.
    File from 3rd link in download 1024x768
     
    PosterYellow likes this.
  3. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Does the Trojan also appears in C:\Windows\Temp folder? I get similar trojans every now and then in the folder which I find it weird. I had played this game for a few years but usually only the clients are 'infected'. However, this time I have been alerted that the trojans were spawning itself (usually in pairs) in my Temp folder.
     
  4. psydaniel
    Offline

    psydaniel Member

    Joined:
    Apr 27, 2018
    Messages:
    4
    Likes Received:
    0
    Gender:
    Male
    Country Flag:
    IGN:
    PsYDaniel
    Level:
    36
    Hey, i have the same problem, not sure if its false positive because mapleroyals was running fine for me before and after i installed a new client to come back from a break it shows it as a virus
     
  5. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Yeah I got the same problem when I have downloaded this version of client. Has the Trojan spawned in your Temp Folder as well?
     
  6. psydaniel
    Offline

    psydaniel Member

    Joined:
    Apr 27, 2018
    Messages:
    4
    Likes Received:
    0
    Gender:
    Male
    Country Flag:
    IGN:
    PsYDaniel
    Level:
    36
    No, but its the same file as you posted, it didnt spawn in my Temp file, windows defender just instantly quarantined it and deleted it.
    But i find it weird that the old false positive trojan file is named differently and that only the latest version of the client has it so im not taking risks at the moment until there is a clear statement about that
     
  7. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    I see. I think the trojan classification changes with most update. I just found it really weird why my Temp file was having trojans spawning in it. It is usually only the client or setup that is scanned as trojans (false positive).
     
  8. psydaniel
    Offline

    psydaniel Member

    Joined:
    Apr 27, 2018
    Messages:
    4
    Likes Received:
    0
    Gender:
    Male
    Country Flag:
    IGN:
    PsYDaniel
    Level:
    36
    Is there anything new about this?
     
  9. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
  10. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Any updaters?
     
  11. Kai
    Offline

    Kai Donator

    Joined:
    Sep 11, 2015
    Messages:
    10,255
    Likes Received:
    11,297
    It's a false positive. Configure your antivirus to make an exception for the folder storing the game files.
     
  12. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Yeah I do understand that my folder that contain the client would be detected as a Trojan (false positive) but
    it's weird this time where similar Trojans actually spawns in my Temp Folder ~f18 (C:\Windows\Temp).
    [My royals' client folder is elsewhere]
     
  13. Kai
    Offline

    Kai Donator

    Joined:
    Sep 11, 2015
    Messages:
    10,255
    Likes Received:
    11,297
    It's just temp files that were created when Royals was being installed.
     

Share This Page