False Positive, gRO

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

False Positive, gRO

L0 Member

The sample is in the password protected zip file:

http://37.61.202.134/false/GatheringRO-Patcher.zip

http://37.61.202.134/false/gRO_Patcher_Update_05-08-17.zip

 

The password for the zip file is:

infected

 

GatheringRO-Patcher

https://virustotal.com/de/file/2d8fc70dbcb38c2f1985d7fdda2b1734aaee5ae131c4382ba53730d53a4ee981/anal...


Patcher Installer Update
https://virustotal.com/de/file/74fada5542b81b7b469540f5a1b5d8cfbb6abe49933eba26dc2541902d83630e/anal...

 

 

We're running a MMORPG game with the name Gathering Ragnarok Online.

The game is online since over 12 years during which time we've always been using the same patcher system.

 

Now we've released a new version of the patcher which is currently being detected as a false positive.

 

The only thing that changed with this latest relase was the IP Adress the patcher does connect to, because we've moved our server hardware.

 

 

 

This patcher is part of our game installer which can be officialy downloaded from our website:

https://gatheringro.ch/?module=client

 

 

The Patcher Update can be downloaded from here:

https://www.gatheringro.ch/_forum/index.php?/topic/48947-server-migration-finished/

And here:

https://www.gatheringro.ch/_forum/index.php?/topic/37892-patcher-error-solutions/

 

The patcher system we're using is from here:

http://thor.aeomin.net/

 

Version 2.6.4.13b

 

 

We're awaiting your response.

 

Sincerely

Marc Bless

1 REPLY 1

L7 Applicator

74fada5542b81b7b469540f5a1b5d8cfbb6abe49933eba26dc2541902d83630e
2d8fc70dbcb38c2f1985d7fdda2b1734aaee5ae131c4382ba53730d53a4ee981

 

Submitted for FP Analysis

  • 2095 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!