Antivirus DB got an update or did you make changes?

[Turbi]

Hey, the client WoW.exe and the base-WoW.exe you store in %appdata%/octo-launcher got detected.
And for some reason, Defender stopped caring about the exclusion and went from \\localhost\A$\OctoWoW to catch it instead.
Not here to j'accuse... Just interested if there were any changes that triggered this all of a sudden. Other than, maybe Defender's DB updating.

EDIT 1:



Yep, DB update, but that doesn't make my question a moot point.

Still super weird, that it would skip the exclusion to hop to the file through \\localhost\ .

Typically when something is ran this way, it feels more of avoiding something. Why should you use localhosts as the installation method?

EDIT 2:

I did some testing - I still had the old TurtleWoW's version of WoW.exe , that one doesn't get flagged. OctoWoW's version gets flagged for direct modifications to the executable (Now note, that I am NOT talking about vanillafixes or any other mods, that do the same thing).

Consider this as a request to know what has been done to the executable, that makes it targeted by Defender all of a sudden? But then TurtleWoW's similar executable does not get flagged.

Also, you can play with TurtleWoW's 1.18.1 WoW.exe , Octo's version isn't required.

The reason why I'm tiny bit questioning this, is most of us has seen dev activity through AIO recently, and I'm sure this is being used as a method to push live updates.
In this form:

[Gashadokuro]

Same issue here.

I’ve been playing WoW on several private servers, using Vanilla fixes and others, for quite some time and have never had any issues. Today, after an update of the launcher, Windows Defender detected five different threats.

I really like OctoWoW, but this is the first time a launcher or private server has triggered alerts for me, so I don’t feel comfortable with this.

[Rocksmash]

Im not a a professional by any means, but I am curious if the alerts happen cause they did something different that most Pservers dont do? mainly speaking in terms of the team staying anonymous? cause usually the other Pservers have their own full website and Octo just has the forums and thats about it. maybe it isnt a real threat but instead a tool that allows the devs to stay under the radar of anyone trying to find who they are.

Take this with a grain of salt, Im just a gamer who loves games! <3

[Turbi]

Im not a a professional by any means, but I am curious if the alerts happen cause they did something different that most Pservers dont do? mainly speaking in terms of the team staying anonymous? cause usually the other Pservers have their own full website and Octo just has the forums and thats about it. maybe it isnt a real threat but instead a tool that allows the devs to stay under the radar of anyone trying to find who they are.

Take this with a grain of salt, Im just a gamer who loves games! <3

It 100% is because they did something differently, but that's also what worries some people sadly.

I opted to replace my WoW.exe with TWoW one, since that doesn't raise any flags. Works fine with it for now.