Freya icon indicating copy to clipboard operation
Freya copied to clipboard

The client suggested by the tutorial is infected...

Open VioletFlare opened this issue 6 months ago • 3 comments

I ran a scan on the client suggested by the wiki, and after applying the patch, the cabalmain.exe is infected with something very bad... even MS Defender complains about it.

https://www.virustotal.com/gui/file/f5e1832bd4e3ae449eaad793803d8927a04092b98f60603e033dbeb7098b0fba/summary

22/72 antiviruses detected a trojan.

VioletFlare avatar Jun 14 '25 23:06 VioletFlare

Besides, if I run the cabalmain.exe on a virtual machine it refuses to run.

VioletFlare avatar Jun 14 '25 23:06 VioletFlare

Hi,

The TGCabalEP8 client? That's weird, I think I was able to run it in a VM back then. Have you tried both arguments, husky and breaklee?

As for virus total output, well that's entirely on RZ forums. Though somewhere I think I have an official Cabal EU EP8 installer, I could upload it, there should be unpacked cabalmain too, but it's not necessary.

ubis avatar Jun 16 '25 14:06 ubis

I remember only seeing the breaklee argument. Although I am not going to try and run this client again since I don't have a proper network config right now for my vms. Besides, it's not only for me. I was planning to use it with other people and I won't pass them a sketchy program.

VioletFlare avatar Jun 17 '25 22:06 VioletFlare