Zygor Classic | Retail & Other Addons.

[shadowman47]

Originally Posted by 911sky

You got a virus total link for that?

its in french but its with windows defender malwarebyte dont give me anything




dont now how to put image from my drive

[thetravellor]

The Zygor Updater (NOT the Zygor Guide) contains a virus.

[911sky]

Originally Posted by thetravellor

The Zygor Updater contains a virus.

If you think so, simple do not use it.

Originally Posted by shadowman47

its in french but its with windows defender malwarebyte dont give me anything




dont now how to put image from my drive

So your claim it is a Virus says and I quote "Malicious_Behavior.SB". All because the links are purposely encrypted.

[szohaib]

why does it detects as TROJAN in your ZYGOR UPDATER? or is it false positive?

[911sky]

Originally Posted by szohaib

why does it detects as TROJAN in your ZYGOR UPDATER? or is it false positive?

For 1 reason, the links are encrypted and it cannot scan them. So it says it is a virus when it is not. Do not like the updater. You have a choose to use it or not.

[szohaib]

Originally Posted by 911sky

For 1 reason, the links are encrypted and it cannot scan them. So it says it is a virus when it is not. Do not like the updater. You have a choose to use it or not.

Appreciate your prompt response. i suppose there is no need of getting so emotional on it I was just asking a genuine question since my malwarebytes and both windows defender declared it as trojan.

[thetravellor]

Originally Posted by 911sky

If you think so, simple do not use it.

So your claim it is a Virus says and I quote "Malicious_Behavior.SB". All because the links are purposely encrypted.

So. I have unpacked the archive on Linux, uploaded the .exe file to VirusTotal, and yes, several of the vendors detect a backdoor trojan.

So you say this is because the binary contains encrypted links? How do you know that?

[Odysseus68]

Originally Posted by nomercy_52

Zygor ShadowLandsDecember 11th, 2020 Release: 8.0.23949.
5x ZygorGuidesViewer\Data\Gold\files.xml(2): error: not well-formed (invalid token)

Just edit the file and at the end of the first line add the > symbol.

[911sky]

Originally Posted by thetravellor

So you say this is because the binary contains encrypted links? How do you know that?

How do I know, because the one that made it said.

Now if a Virus. Then how come your result is saying 7 different things?

Also seeing you want to unpack it. Then go ahead and unpack the code and take a look and see if you find what your result claims.

[shadowman47]

Originally Posted by shadowman47

its in french but its with windows defender malwarebyte dont give me anything




dont now how to put image from my drive

my malwarebyte dont give it as a virus obnly windows defender

[911sky]

Originally Posted by shadowman47

my malwarebyte dont give it as a virus obnly windows defender

Well that is because windows defender does not like rar files. I have before taken the Chrome installer, rar'ed it and windows defender said it was a virus. All because it is a rar file.

[XvNormalvX]

@ @ @ @

Hi, I'm the one who created the updater.

I have explained here why the updater might get false positives, and why I had to obfuscate the exe and dll (which is most likely what gives the false positive)

[911sky]

Proves a point. People only say something when
1. They cannot get what they want for free.
2. There is a problem that mostly they caused and do not check.

Make your life easier. Trust what is posted or do not use it. Have a Good Day

[lilacorn]

i download the file that 911 has provided...
open the RAR file....
open the addons folder and delete the old zygor guide folder....
drag n drop the folder from the RAR window into the wow interface addons folder.

thats it.... i do it manually not using anything else to download the guide to install it n etc.

[thetravellor]

Originally Posted by XvNormalvX

@ @ @ @

Hi, I'm the one who created the updater.

I have explained here why the updater might get false positives, and why I had to obfuscate the exe and dll (which is most likely what gives the false positive)

Thanks for taking the time to explain this.