[Dead thread, read official post by tencent] Keylogger is Real (I think) You shouldn't worry bc it's probably just anti-cheat.

[FPV Drone Pilot]

https://imgur.com/a/2Hjl4PO I am 90% sure it only is running on your ingame but just be aware.

[EDIT 2]: The anouncement on this forum states that a keylogger is not used. But in the case that it is being used, there is virtually no danger.

[EDIT]: after testing with multiple AV software products, I have a theory on the keylogger. Most likely the game does record your keystrokes (for anti-cheat purposes). The file that it saves to is under your appdata\roaming\tencent folder. The file only changes after closing the game. The anti-keylogger only stopped ROE from starting when I manually started it. With this information we can reasonably hypothesize that the keylogger is only active while you have ROE open. There is a file that ROE creates in your OS when you isntall it, if you go to windows\system32 and search 'tessafe' and delete the file, it does not come back after running the game.

tl;dr You can download the game, it's fine. Don't sign in to anything with the game open. That's it.

[Starwight/ttv]

I use MalwareBytes and it has found nothing related to Tencent. So fake news.

[Hraesvelgr]

You are aware that in that photo you have your C:\Users\Hype one at the top and then c:\users\hype

Why would one be capitalised and one be lowercase? Good editing skills there.

[kevvie boi]

I acutally found something called crypto miner, I'd post about it but I deleted it already. I was skeptical at first then I did a full scan of my pc, the thing moves around. Start your pc in safe mode and then do a deep scan. I used avast, others used malwarebytes.

[Mike]

According to google, that antivirus is well known for doing this.

Coincidentally all 3 of the things in that scan are related to game anticheats. Moss being a very well known one.

Fun fact: Nearly every anticheating program initially gets detected by antiviruses. Most of the time they have to contact the antivirus manufacturer to 'whitelist' their files- as an anticheat is quite literally: monitoring internet traffic, encrypting itself (and other files in some cases) to avoid being bypassed, reading system settings and hardware, watching other running programs, and in some cases even screenshotting your desktop (Moss does that for Rainbow Six).

All of these things- in the wrong context- are symptoms of a virus, and as such are going to get detected.

EasyAntiCheat, for instance, was detected by several antiviruses until it was well-established enough that they got whitelisted.
If you use old virus definitions on EasyAntiCheat, it would still get detected to this day.

[Mike]

Also I would be interested in seeing your scan results for something well-established as Avast and Malwarebytes. Coincidentally I use both of them (and run full-system scans on a weekly schedule), and they've found nothing whatsoever.

The only proof of this 'keylogger' is a screenshot from an extremely poorly reviewed antilogging service that hasn't been updated in over a year.

And yeah, again, an anticheat DOES log your keystrokes and other such things, that's .. the point.

I'll be happy to see those other screenshots. (both avast and malwarebytes save scan/quarantine logs, so you can screenshot those as well :D)

[PoopTaco [No Screen]]

Originally posted by MicroK:

Also I would be interested in seeing your scan results for something well-established as Avast and Malwarebytes. Coincidentally I use both of them (and run full-system scans on a weekly schedule), and they've found nothing whatsoever.

I got a positive on Avast (free version) while installing.

That said, Avast isn't exactly the gold standard regarding false positives.

[FPV Drone Pilot]

Originally posted by Jam (✧ω✧):*☆:

You are aware that in that photo you have your C:\Users\Hype one at the top and then c:\users\hype

Why would one be capitalised and one be lowercase? Good editing skills there.

I'm sorry I'm trying to find a way to play the game without being scared for my security.

Originally posted by MicroK:

Also I would be interested in seeing your scan results for something well-established as Avast and Malwarebytes. Coincidentally I use both of them (and run full-system scans on a weekly schedule), and they've found nothing whatsoever.

The only proof of this 'keylogger' is a screenshot from an extremely poorly reviewed antilogging service that hasn't been updated in over a year.

Avast did not find anything when I scanned after uninstalling the game. It also did not find it when reinstalling and running the game once. Malwarebytes says there are no threats either.

I tried another software, Loaris Trojan remover, which gives your PC a free scan (but costs money to remove/fix files).
https://imgur.com/a/i2IH2Us

It seems to me that the keylogger is part of the OS and saves to the roaming\tencent folder.
My hypothesis is that the keylogger is used for anticheat and only activates while the game is open. So as long as the game and all its processes are closed I think we should be safe :)

I deleted the Windows\System32\ tessafe file and the game booted. I searched for it after joining a match and then closing the game and the file did not replace itself.

As for the roaming file it only changes when you close the game. I opened it using notepad++ to kill all the data and after joining a tpp match then having someone kill me, leaving the match, then closing the game, the file size went form 0 to 7 kb. I stand by my hypothesis.

[Lowborn]

did you read new announcement?

[FPV Drone Pilot]

Originally posted by Art:

did you read new announcement?

Didn't see it lol. It is only 3 hours old though. My unprofesional investigation and the anouncement only support each other so that's nice.

[Lemmywinks]

Originally posted by Art:

did you read new announcement?

No one does, or else these threads wouldnt keep happening. These and the Euro release questions have been answered many times yet we keep getting threads.

[FPV Drone Pilot]

Originally posted by Lemmywinks19:

Originally posted by Art:

did you read new announcement?

No one does, or else these threads wouldnt keep happening. These and the Euro release questions have been answered many times yet we keep getting threads.

Googling if ROE has malicious anything ends up pointing you to threads full of gray areas, and not officials responses by tencent. I think that's why.

[Lemmywinks]

Originally posted by HypeTrains:

Originally posted by Lemmywinks19:

No one does, or else these threads wouldnt keep happening. These and the Euro release questions have been answered many times yet we keep getting threads.

Googling if ROE has malicious anything ends up pointing you to threads full of gray areas, and not officials responses by tencent. I think that's why.

They posted like 3 or 4 days ago regarding the exact question. They cleared it up even more today. Listening to 3rd parties regarding this issue seems silly right now as far too many people go out of their way to dump on a game they dont like etc.

[HammerHead]

I have Norton (fully updated) and i scaned RoE game folder, my entire "SteamLibrary" folder (D:\SteamLibrary), "Windows" folder (C:\Windows) and it could not find anything related to Tencent or RoE.

After then these i couldn't resist my paranoia and started Windows with "safe mode" and results are same. If Norton trust this game then i will also trust.

[tombomb]

stop.

https://steamcommunity.com/app/755790/discussions/0/1730963192552148217/

[FPV Drone Pilot]

Originally posted by \\:

stop.

https://steamcommunity.com/app/755790/discussions/0/1730963192552148217/

This post was made after I initially began this thread. My final conclusion which I put in the edit of the opening post does not say the game is dangerous. I am going to revise it so people don't get the wrong idea.