HARDKNOX36
Member
- Joined
- Sep 9, 2023
- RedCents
- 60¢
I just purchased sub for RG and comp shut it down, TiuFxyaF.exe was flagged as Malware. Is this safe to run?
-
You've discovered RedGuides 📕 an EverQuest multi-boxing community 🛡️🧙🗡️. We want you to play several EQ characters at once, come join us and say hello! 👋 -
IS THIS SITE UGLY? Change the look. To dismiss this notice, click the X --->
Problem - First time user Malware (1 Viewer)
- Thread starter HARDKNOX36
- Start date
Yeah. It's just the injector I think. It gets a random name. There's no malware. There's a bunch of normal users that make stuff here with access to the core code.
It'll have a different random name next time you run it too. It's best to exempt that whole directory from antivirus. Anything that triggers keystrokes (moves your character for you etc) can set off certain antivirus programs and such. BitDefender is the worst offender on this.
It'll have a different random name next time you run it too. It's best to exempt that whole directory from antivirus. Anything that triggers keystrokes (moves your character for you etc) can set off certain antivirus programs and such. BitDefender is the worst offender on this.
- Joined
- Oct 7, 2015
- RedCents
- 2,741¢
@wired420 is absolutely correct. However you don't have to take our word for it. You can double check the current random name by opening the EQBCS.ini file (located in the base folder for your MacroQuest installation) and the MacroQuest.ini (located in the config folder of your MacroQuest installation) file in a text editor.
The EQBCS file will have an entry that looks like:
Meanwhile the MacroQuest.ini file will have a section that looks like:
If your anti-virus program blocked a file that matches one of these two file names you can be assured it's safe to ignore the antivirus warning and whitelist the Macroquest installation folder.
The EQBCS file will have an entry that looks like:
INI:
[Internal]
RenamedProcess=some_random_characters.exeMeanwhile the MacroQuest.ini file will have a section that looks like:
INI:
[Internal]
SpawnedProcess=a_different_set_of_random_characters.exeIf your anti-virus program blocked a file that matches one of these two file names you can be assured it's safe to ignore the antivirus warning and whitelist the Macroquest installation folder.