# Possible virus detected in Launcher?

**URL:** <https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075>\
**Category:** EVE Launcher\
**Created:** [May 1, 2023, 8:45am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075 "2023-05-01T08:45:05Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Benjiro\_Acami](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/benjiro_acami/32/369134_2.png) [@Benjiro\_Acami](https://forums.eveonline.com/u/Benjiro_Acami)\
**Post date:** [May 1, 2023, 8:45am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/1 "2023-05-01T08:45:06Z")

</div>

I have updated the EVE Launcher with the new Evolved Beta Launcher. It was working fine for a couple of day, then all of a sudden today, when I start the launcher, my antivirus software “Bitdefender” detected this possible virus: Gen:Suspicious.Cloud.4.hy4@aW!!l3oi and I couldn’t start the game.

 ![Screenshot 2023-05-01 183617](https://global.discourse-cdn.com/eveonline/original/4X/e/c/1/ec14f54c4d5f1f45cad749240c428433f1b66412.png)

Has anyone else encountered this?

I had to uninstall EVE client and did a system scan to remove that infection. Gone back to the original EVE client … seemed to be ok now.

---

<div class="post-metadata">

**Author:** ![Amon\_Tobin](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/amon_tobin/32/376952_2.png) [@Amon\_Tobin](https://forums.eveonline.com/u/Amon_Tobin)\
**Post date:** [May 1, 2023, 2:08pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/2 "2023-05-01T14:08:26Z")

</div>

There was no virus, it was a false positive, sometimes these things happen with any antivirus. If the source from where you downloaded the program or file is a trusted one, nothing will happen… add the program to the exceptions list and that’s it. Probably some part of the launcher code is similar to a known virus, but your computer is clean.

---

<div class="post-metadata">

**Author:** ![Feilamya](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/feilamya/32/436018_2.png) [@Feilamya](https://forums.eveonline.com/u/Feilamya)\
**Post date:** [June 16, 2023, 9:12pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/3 "2023-06-16T21:12:31Z")

</div>

So CCP never makes mistakes and accidentally includes malware in their patches?

Antivirus software exists and warns for a reason, and while false positives do happen, and most detections in files from the EVE client are indeed false positives, false positives are rare, and it is CCP’s responsibility to avoid them, so people can play EVE without having to turn off antivirus or risking their systems getting infected by actual malware.

If you search on the forums, you will find at least one post by a dev where they promised they will reach out to the specific antivirus vendor whose software detected the false positive (in that case AVG). QA testing patches with at least Windows Defender should be a minimum requirement (and it can be automated), and there have been at least 2 incidents where Windows Defender reacted to a file in the EVE client.

Since this is currently happening again, can we get a statement from CCP on this?

---

<div class="post-metadata">

**Author:** ![Feilamya](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/feilamya/32/436018_2.png) [@Feilamya](https://forums.eveonline.com/u/Feilamya)\
**Post date:** [June 16, 2023, 9:15pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/4 "2023-06-16T21:15:09Z")

</div>

This is Windows Defender, from today’s patch. More information can be provided if necessary, but if any potentially sensitive data is needed, then I will open a support ticket.

 ![eve_trojan](https://global.discourse-cdn.com/eveonline/original/4X/a/4/e/a4ec46891163d4373fa3217155510cc41515e96b.jpeg)

---

<div class="post-metadata">

**Author:** ![SanZo\_Fengi](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/sanzo_fengi/32/375327_2.png) [@SanZo\_Fengi](https://forums.eveonline.com/u/SanZo_Fengi)\
**Post date:** [June 16, 2023, 9:41pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/5 "2023-06-16T21:41:41Z")

</div>

It seems im not alone.  
I also encountered this today,  
Same Trojan , same file …

---

<div class="post-metadata">

**Author:** ![mlove](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/mlove/32/375328_2.png) [@mlove](https://forums.eveonline.com/u/mlove)\
**Post date:** [June 16, 2023, 9:41pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/6 "2023-06-16T21:41:57Z")

</div>

I also got the same thing. what is the work around?

---

<div class="post-metadata">

**Author:** ![SanZo\_Fengi](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/sanzo_fengi/32/375327_2.png) [@SanZo\_Fengi](https://forums.eveonline.com/u/SanZo_Fengi)\
**Post date:** [June 16, 2023, 9:44pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/7 "2023-06-16T21:44:50Z")

</div>

My flag happened AFTER i patched my launcher while i was running 1 client and tried to start another…  
Could we get someone from CCP to look into this?  
 ![image](https://global.discourse-cdn.com/eveonline/original/4X/5/4/4/544e97e68c6576316e376c51e41822b4fc00d744.png)

---

<div class="post-metadata">

**Author:** ![Angela\_Aion](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/angela_aion/32/416226_2.png) [@Angela\_Aion](https://forums.eveonline.com/u/Angela_Aion)\
**Post date:** [June 16, 2023, 10:16pm UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/8 "2023-06-16T22:16:29Z")

</div>

Bumb have friend whit same problem that cannot log in, still waiting for solution

---

<div class="post-metadata">

**Author:** ![Geo\_Eclipse\_Oksaras](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/geo_eclipse_oksaras/32/500781_2.png) [@Geo\_Eclipse\_Oksaras](https://forums.eveonline.com/u/Geo_Eclipse_Oksaras)\
**Post date:** [June 17, 2023, 12:54am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/9 "2023-06-17T00:54:43Z")

</div>

> [@Eve files are incorrectly flagged by Windows Defender - 2023/06/16](https://forums.eveonline.com/t/eve-files-are-incorrectly-flagged-by-windows-defender-2023-06-16/409582):
>
> Hello everyone, We’ve had multiple tickets submitted over the last hour and we’ve become aware that old versions of Windows Defender are incorrectly flagging EVE files as a Trojan and quarantining them. The files seem to no longer flag as problematic as of update 1.391.1678.0 (from 16.06.2023 @ 21:48:23). We are raising the issue with Microsoft, but if you are encountering this issue, we recommend you update your Windows Defender Signatures to resolve the problem. To do this: Search in Wind…

---

<div class="post-metadata">

**Author:** ![ISD\_Drew](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/isd_drew/32/395254_2.png) [@ISD\_Drew](https://forums.eveonline.com/u/ISD_Drew)\
**Post date:** [June 17, 2023, 12:55am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/10 "2023-06-17T00:55:45Z")

</div>

Hi all - See [Eve files are incorrectly flagged by Windows Defender - 2023/06/16](https://forums.eveonline.com/t/eve-files-are-incorrectly-flagged-by-windows-defender-2023-06-16/409582) for more information.

---

<div class="post-metadata">

**Author:** ![Amon\_Tobin](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/amon_tobin/32/376952_2.png) [@Amon\_Tobin](https://forums.eveonline.com/u/Amon_Tobin)\
**Post date:** [June 17, 2023, 10:44am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/11 "2023-06-17T10:44:22Z")

</div>

Well?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/eveonline/original/3X/4/1/41ec4921cbaca7a6f9ea556e7cc20018461eae5e.png) [@system](https://forums.eveonline.com/u/system)\
**Post date:** [September 15, 2023, 10:44am UTC](https://forums.eveonline.com/t/possible-virus-detected-in-launcher/404075/12 "2023-09-15T10:44:44Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
