RimWorld

RimWorld

RimPy Mod Manager Database
Culain 5 Apr, 2020 @ 10:44am
trojan?
Hello,

i just downloaded the last version (1.0.2.6) today and my windows went all crazy over the rimpy.exe.
I checked with virustotal again. no match here.
Maybe something that should be taken care of?

https://imgur.com/a/Hm93T5c
< >
Showing 1-12 of 12 comments
False Flag deines Windows <3
8faiNt ı♣ı 6 Apr, 2020 @ 5:11am 
I wont be using it till it is adressed
dunno whats wrong
Zeradus 6 Apr, 2020 @ 5:31am 
I have had the same thing and no previous versions had a trojan in them. If this was a consistent thing sure, but this trojan wasn't in there until the latest release.
Paladin  [developer] 6 Apr, 2020 @ 6:26am 
https://www.virustotal.com/gui/file/d63a1616c7efe70e06aec6f5ca2f98761b983cf033664f158fb84b4ef3a2e72f/detection

I do not receive notification on new discussions. So better inform me in already created threads or comment section.
Last edited by Paladin; 6 Apr, 2020 @ 6:27am
Paladin  [developer] 6 Apr, 2020 @ 6:29am 
As I have just answered in comments. That may be a trojan, but your system may got infected before that download, but after previous version. Any file downloaded later may get infected, afaik. Since file is clear according to virus total (even Microsoft antivirus), your PC may really be infected. That is why I recommend to send my link to antivirus devs, not files that were already on your PC. So they will check if it really infected and whitelist it (false positive). There is nothing I can do from my side.
Last edited by Paladin; 6 Apr, 2020 @ 6:30am
N3X15 6 Apr, 2020 @ 5:46pm 
Windows Defender nukes the EXE, nihil. You have to tell it to restore it, and then add an exception.
Morticia Mellian 6 Apr, 2020 @ 10:00pm 
Adding further confirmation that my windows defender on a new computer fresh installed OS as of less week ago warned of this trojan as well, after downloading and replacing the previous version of rimpy.

False positive or not, this is disconcerning, and cannot expect people to just ignore that, or that everyone getting this somehow all got infected beforehand. This on top of the fact this file is linked from a google drive rather from steam or github.

Will stick to the previous version for now, as windows defender on either of my computers are not picking it up in it, or on the systems.
Paladin  [developer] 6 Apr, 2020 @ 11:37pm 
Originally posted by Morticia Mellian:
False positive or not, this is disconcerning, and cannot expect people to just ignore that
The answer is - do not ignore it. Steps were given, contact your antivirus developer, send them suspicious file and let them check it. Why do you ignore this recommendation?

Any antivirus update, any Rimpy update may cause such issues. I am not going to contact all antivirus devs everytime update is released. It is a hobby project.
Last edited by Paladin; 6 Apr, 2020 @ 11:46pm
Paladin  [developer] 7 Apr, 2020 @ 12:51am 
Looks like somebody have contacted Microsofta and they analyzed the file, well now it is Rising antivirus time: https://www.virustotal.com/gui/file/d63a1616c7efe70e06aec6f5ca2f98761b983cf033664f158fb84b4ef3a2e72f/detection
Triel 7 Apr, 2020 @ 10:52am 
Strange, my computer never yelled virus over this
Paladin  [developer] 11 Jul, 2020 @ 5:12am 
Last edited by Paladin; 11 Jul, 2020 @ 5:12am
Lord Asriel 14 Oct, 2021 @ 8:39am 
Here's what happened to me (windows, release 1.1.3.18): Avira was whining at first, then stopped. I extracted with the folder name (my_path\RimPy_Windows). When I did this, RimPy.exe would not move for anything - I just got a message to "try again". That was even AFTER it asked for admin priviledges and I gavwe them. Then, I renamed the folder to not have "wiundows" in it, and it worked.
< >
Showing 1-12 of 12 comments
Per page: 1530 50