After Update: Trojan:Win32/Pomal!rfn

[Michael Afton]

I was trying to play but windows defender says it's dangerous, this happens to someone else?

[DrakonaS]

Same thing happened to me. After the latest update, because of lwjgl.dll file, we see Trojan:Win32/Pomal!rfn , that occurs for the game not to open. Can we find a solution in any way ?

[chipopa]

I have the same problem. The game tries to start, but the virus protector complains about Trojan:Win32/Pomal!rfn in C:\Program Files (x86)\Steam\steamapps\common\TheoTown\.lwjgl\3.3.4-snapshot\x86\lwjgl.dll

[theotowngame]

Hi, it seems that Windows Defender deletes the file lwjgl.dll that the game creates and depends on. I confirmed that the dll is the original one from here: https://www.lwjgl.org/browse/release/3.3.4/windows/x86 (it's a framework for java) and escalated the issue to Microsoft. They did not reply to me, however, they whitelisted the dll so the issue should be resolved.

Here's the current state of detection for this file: https://www.virustotal.com/gui/file/4d87e75c96bba1100772b956f3ce7bd1508a90fff622b7d642d507ba1f8ae3f2 since it's a relatively new version false positives are not that unexpected, though it is annoying.

A way to circumvent this is to manually restore the dll in the windows defender. Though, I cannot generally recommend this so waiting may be a safer option.

In the future I will wait several months before updating dependencies of the game if feasable to avoid issues like that.

[DrakonaS]

Thank you for fast solution. I tried to open the game now and my game has opened. Windows defender didn't do anything.

[theotowngame]

Thanks for letting us know, that's great news!

[KingRyan]

has it been fixed yet?

[theotowngame]

Given that it works for some people again, including myself, I would assume that Microsoft did unblock it. Please report here if you still experience the issue even after updating Window Defender definitions.

[[livE]Unknown_Genius]

Originally posted by theotowngame:

Given that it works for some people again, including myself, I would assume that Microsoft did unblock it. Please report here if you still experience the issue even after updating Window Defender definitions.

No issues with the former one in general, however:
GData Total Security started to detect jemalloc.dll (in TheoTown66.lby) as Gen:Variant.Fragtor.680592 on Engine A (1 of the 2 engines they use) and fully issues a virus warning for it as of today.
Just thought I'd let you know.