Solved [Solution Given] Malware in TEMPORARY files when running royals?

Discussion in 'Closed' started by threesat, Sep 2, 2019.

Thread Status:
Not open for further replies.
  1. threesat
    Offline

    threesat Well-Known Member

    Joined:
    May 31, 2019
    Messages:
    132
    Likes Received:
    49
    Country Flag:
    when running mapleroyals and actually being in game, i have gotten popups from windows defender alerting that there is malware in my C/Windows/Temp/{some long random string} folder. I have had royals added as an exception for everything prior to this happening. Any followup would be appreciated.

    I know that royals is causing this because this is happening on a clean installation of windows 10 64 bit

    I am aware of issues where users aren't disabling their antivirus so royals straight up isn't running, but I guess my issue is different so no flame pls
     
    Last edited: Sep 2, 2019
    threesat, Sep 2, 2019
    #1
  2. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    Never heard of such issue before

    Could you take screenshot of the error and provide the location of the described temporary folder?
     
    Dave Deviluke, Sep 3, 2019
    #2
  3. threesat
    Offline

    threesat Well-Known Member

    Joined:
    May 31, 2019
    Messages:
    132
    Likes Received:
    49
    Country Flag:
    darn, I uninstalled royals since then so I can't really provide a screenshot. for windows defender, it just popped up and i can see that it quarantined something in my C/Windows/Temp folder..
     
    threesat, Sep 3, 2019
    #3
  4. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Hello sirs, I have the similar issues but am not sure if it were caused by running royals. Apparently, the trojans were of similar type as Royals' setup (not sure bout the client's) and they usually come in pairs. Does anyone have the same issue?
     

    Attached Files:

    • 1.PNG
      1.PNG
      File size:
      12.3 KB
      Views:
      82
    • 2.PNG
      2.PNG
      File size:
      11.9 KB
      Views:
      86
    • 3.PNG
      3.PNG
      File size:
      16.4 KB
      Views:
      82
    PosterYellow, Mar 2, 2021
    #4
  5. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    Dave Deviluke, Mar 3, 2021
    #5
  6. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    My royals client is running fine as usual. Just concerned whether if the malware threats are actually coming from royals client running. P.S. I understand that royals has false positive malware threats.
     
    PosterYellow, Mar 3, 2021
    #6
  7. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    The malware threats are basically just Nexon telling anti-virus companies to encourage Royals players to quit

    There are no virus in Royals files

    If you are referring to the detection, some anti virus only detect while the file is launched, while others may detect the installer or while installing
    Each anti virus have their own definition of what Royals is cause Royals isn't an actual virus
     
    Dave Deviluke, Mar 3, 2021
    #7
  8. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Yeah I am aware of that. However, a couple of temp files have been spawning in my C:\Windows\Temp folder every now and then where my Windows Defender have been detecting it as similar Trojan type as Royals. Was wondering if it is affiliated with Royals Client.
     
    PosterYellow, Mar 3, 2021
    #8
  9. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    What are the file names?
     
    Dave Deviluke, Mar 3, 2021
    #9
  10. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    TmpAB14 was one of the files. It always comes in a pair whenever it generates and similar naming style, TmpXXXX (XXXX as a comination of letters and number). No other description were provided so I was trying my luck here if anyone had similar issue from royals.
     
    PosterYellow, Mar 3, 2021
    #10
  11. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    Just checked my Temp folder and I only have tmpAB6B.tmp and UDDA6ED.tmp, also tested removing them
    Still able to run Royals without it

    I have also tried scanning those 2 files with Windows Defender and no alerts was given, so I am guessing the files you mentioned came from another private server's installation
     
    Dave Deviluke, Mar 3, 2021
    #11
  12. PosterYellow
    Offline

    PosterYellow Donator

    Joined:
    Oct 9, 2017
    Messages:
    123
    Likes Received:
    85
    Gender:
    Male
    Thanks for the help sir but I have no other private server installations on this computer either. Just putting this post here if other players encounter the same issue
     
    PosterYellow, Mar 3, 2021
    #12
  13. Dave Deviluke
    Offline

    Dave Deviluke Forum Moderator

    Joined:
    Oct 5, 2017
    Messages:
    12,205
    Likes Received:
    11,957
    Gender:
    Male
    Location:
    MapleRoyals Discord
    Country Flag:
    IGN:
    DaveDeviluke
    Level:
    70
    Sorry but I have to lock this thread as you are necroing a thread from Sep 2019

    Please do create a new thread if you wish to discuss with other players about the spawned Temp files as I do not wish to spam this thread owner's notifications anymore as we been dragging this for quite some time
     
    Dave Deviluke, Mar 3, 2021
    #13
Thread Status:
Not open for further replies.

Share This Page