Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

Hey,

i have a similar Problem with the Launcher itself. Yesterday i played normally with no Login Problems or Launcher Problems. Now i get the error message which says: "Operation did not complete successfully because the file contains a Virus or potentially unwanted software"
The phoenix.exe also deletes itself after that message. Any ideas on how to fix it?


PS: I hope its okay that i posted my Problem in this Thread, because it souned so similar

Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

hirox1336 wrote:
Mon 28 Sep 2020 8:43 AM
Hey,

i have a similar Problem with the Launcher itself. Yesterday i played normally with no Login Problems or Launcher Problems. Now i get the error message which says: "Operation did not complete successfully because the file contains a Virus or potentially unwanted software"
The phoenix.exe also deletes itself after that message. Any ideas on how to fix it?


PS: I hope its okay that i posted my Problem in this Thread, because it souned so similar



This just happened to me ! Poof the Phx launcher is gone. Great way to start the morning. sigh

Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

ExcretusMaximus wrote:
Mon 28 Sep 2020 8:52 AM
It's a false positive, and the launcher is missing because your antivirus quarantined it; go to your AV and set the launcher as an exception, then go to the quarantined files section and restore it.


Thanks. Any idea why this happened now after all this time?

Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

There was a recent update to our anti cheat capabilities which, like all anti cheat tools with that feature, exhibit similarities to certain trojaners: a remote server can command the client to do certain things, the collection of certain data in case of suspicion in this case.
Some new radar bans will be happening later this week because of this.

Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

I would be very cautious about restoring Files from anti-virus in this situation. If it was my PC I would just delete the Phoenix Folder and do a fresh install.
My Friend had this happen we looked at the files in the quarrantine folder actually are Win32/Wacatac.D!ml Files.

Here is some information about the program your AV is detecting:
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/Wacatac.D!ml
https://malwarefixes.com/threats/trojanwin32-wacatac-dml/

It may not be a false possible.

Re: Threat identified: Trojan:Win32/Wacatac.DC!ml

gruenesschaf wrote:
Mon 28 Sep 2020 9:37 AM
There was a recent update to our anti cheat capabilities which, like all anti cheat tools with that feature, exhibit similarities to certain trojaners: a remote server can command the client to do certain things, the collection of certain data in case of suspicion in this case.
Some new radar bans will be happening later this week because of this.
yea