Is Anyone Getting a Virus When They Launch R2modman?

[The Mario]

Hello everyone,

I had recently just updated r2modman and the mods on a profile for risk of rain 2 my friends noticed that our computers caught a trojan virus "wacatac.b ml" upon launching the game. Has anyone else experienced this? Could it be a false positive despite causing the notification every time the game launches?

[76561198811524324]

No it's probably a false positive. You can send me your mod profile and I can check all the source code from everything if you are worried.

[Hiroko]

Most likely a false positive, but remove it and reinstall r2modman if you're worried, especially if you log into work/business accounts on that pc. The actual virus is a keylogger. Part of r2modman functionality (the ability to tell which key you pressed) is probably being associated with a known virus because they had no clue if r2modman is a safe program or not.

[Myno]

Originally posted by The Mario:

Could it be a false positive

Could it be the thing that it is 99.999% of the time (that is, a false positive). Yes, yes it could.

Seriously, do some research on just how useless AV software is these days.

[ETERNALVOID]

On the risk of rain modding discord a core mod library is getting flagged for a few people.
Are you using Windows Defender? and is the file getting flagged called "FrankenMonoPrintStackOverflowException.dll" ?
I think they are looking into it.

[Mediterranean Warlord Frosty]

got a trojan yep. deleted it and game runs fine. Frankenmonosomethingsomething.

[nul]

wacatac.b is infamously a false positive.

[ArcheR]

Originally posted by ETERNALVOID:

On the risk of rain modding discord a core mod library is getting flagged for a few people.
Are you using Windows Defender? and is the file getting flagged called "FrankenMonoPrintStackOverflowException.dll" ?
I think they are looking into it.

Is this something to worry about?

[ETERNALVOID]

Originally posted by ArcheR:

Originally posted by ETERNALVOID:

On the risk of rain modding discord a core mod library is getting flagged for a few people.
Are you using Windows Defender? and is the file getting flagged called "FrankenMonoPrintStackOverflowException.dll" ?
I think they are looking into it.

Is this something to worry about?

The mod was updated to help give mod authors more info about crashes, thats what apparently is causing it. There couple replies on the discord from mod authors that illustrate its a false positive.

https://github.com/risk-of-thunder/RoR2BepInExPack/issues/25#issuecomment-2141595616

Above is an issue I just found about this on Github, apparently fixed anyway, can't verify myself I use third party anti virus that do not flag it anyway.

Can never 100% say, but debugging tools do get false flagged.

From what I can tell is that one of the contributors to the modding library said:

"Yes, we are aware of the issue and resolving it
It was supposed to help us get more info from crashes, but windows Defender flagging is a no go".

not entirely sure tbh, just trying to find some info on it.

[Rouge 11]

when I first got R2modman I got a virus detection quarantined it and I had no more problems

[Rouge 11]

for lethal compony