Trojan:Win32/MalUri.A!cl

makemecry

Newbie
Jul 30, 2019
23
14
191
My windows Defender is refusing to download all those Games:
-Happily Ever After
-Angst
-Wedding roaming
-Bored Wife
-Shadows of Desire.

it all says: Trojan:Win32/MalUri.A!cl
how can this be?
 

whowhawhy

Well-Known Member
Jan 19, 2023
1,056
1,838
222
vikingupload
they've changed domains recently, which made adblockers ineffective briefly and that may have led to people falling for their popups, that getting reported or caught by av's, and av's ending up flagging the whole site as unsafe.
staff here has looked into it and deemed it safe to download from as long as you follow viking's advice to close any popups suggesting you download a malware installer instead that open when you click download the first time (or use an adblocker, as the filters have since been updated/fixed)
https://f95zone.to/threads/drive-by-trojan-through-vik1ngfile-site-links.278107/
it might be that uploadhaven is also disliked by some av's. could be because of ads (iirc they're popup-heavy if you dare to turn your adblock off), could be because some people uploaded malware to it in the past and shared for download, and instead of av flagging a specific download page, the whole site was written off (ignoring how file hosting sites works).

staff here also scans files they put in the op, so it's unlikely they'd miss stuff that's easily detected, especially on a larger scale.

of course you should still take precautions like firewalls, limited rights user accounts, sandboxing, and real-time protection, when running stuff you get from the internet (some modern threats aren't detected by simply telling an av to scan the file). and don't hestitate to voice concern again if anything else happens (like an av going off during the game or as you try to launch it).
 
  • Heart
Reactions: makemecry

anne O'nymous

I'm not grumpy, I'm just coded that way.
Modder
Donor
Respected User
Jun 10, 2017
12,934
21,513
1,026
-Happily Ever After
Hmm... it have a version of Python that do not match the one that should come with this version of Ren'Py (should be python 3.12.7, is 3.13.1); and that is silently blocked by my AV, so I can't test it with virustotal.
But everything else is correct.

Bob69 do you know more?
 

Bob69

Uploading the World
Uploader
Donor
Compressor
Mar 2, 2019
24,363
337,503
998
Hmm... it have a version of Python that do not match the one that should come with this version of Ren'Py (should be python 3.12.7, is 3.13.1); and that is silently blocked by my AV, so I can't test it with virustotal.
But everything else is correct.

Bob69 do you know more?
Hmm I am not at my PC so can’t really check more. But that game should be fine, from what I can tell.
IIRC 'MalUri' is classification from WinDefender that mean it’s a virus or Trojan in this case that tries to infect the system via malicious link. That would fit for Viking with the redirect to mediafire.

I’d say if the file itself is the right size (or close to other Hoster) then it should be fine to allow the download and scan
 
  • Like
Reactions: anne O'nymous

whowhawhy

Well-Known Member
Jan 19, 2023
1,056
1,838
222
Hmm... it have a version of Python that do not match the one that should come with this version of Ren'Py (should be python 3.12.7, is 3.13.1); and that is silently blocked by my AV, so I can't test it with virustotal.
But everything else is correct.
it's public on patreon btw, if you want to compare further
 
  • Like
Reactions: anne O'nymous

anne O'nymous

I'm not grumpy, I'm just coded that way.
Modder
Donor
Respected User
Jun 10, 2017
12,934
21,513
1,026
it's public on patreon btw, if you want to compare further
Just checked, all files have the same MD5 (I know, old, but reliable enough for this), so nothing to see here. It's a false positive like Bob69 hinted to.

Also, trying from another sandbox, I got a version of Python that is valid... Don't know what I downloaded (surely not from here), but I have a sandbox to purge :cautious:
 

Count Morado

Fragrant Asshole
Donor
Respected User
Jan 21, 2022
12,030
23,531
913
My windows Defender is refusing to download all those Games:
-Happily Ever After
-Angst
-Wedding roaming
-Bored Wife
-Shadows of Desire.

it all says: Trojan:Win32/MalUri.A!cl
how can this be?
thanks for your concern.

For future suspicions, please check the most recent couple of pages in the malware thread already created and if you see nothing about your concern, post there.

https://f95zone.to/threads/recent-malware-infected-games.207437/

Suggestion:
For the files that your virus checker pops positive - include:
  • link to the game thread
  • which filehost link(s) for which platform(s) you downloaded.
  • what day/time you attempted/downloaded (with your time zone).
  • the antivirus you use.
  • the virus(es) your antivirus says it found.
    • If you use virustotal, then either provide screenshot of the results or the link to the results page.
 
  • Heart
Reactions: makemecry