malware PUA:Win32/GameHack detected on Windows system

yeeeeyeee

As in the title, my Windows Defender identified this well known malware originating from AppData\Roaming\Advanced Combat Tracker\Plugins\deucalion-1.2.1.dll

This is very concerning. After checking my defender history, turns out this malware was blocked multiple times since the version available on 05-05-2025.

yeeeeyeee

I would be grateful for information whether this .dll is a part of ACT project itself since it is in the main \Plugins directory and not in a specific subdirectory like \OverlayPlugin, or should I try and notify authors of the plugins about this possible malware threat.

EQAditu

You accepting their fearmongering is the first problem.

PUA = Potentially Unwanted Application.  Not malware.

Win32 = Windows.  Not malware.

GameHack = Something involving directly accessing a game.  Not malware.

Why are you calling it malware?  Probably because AV companies don't care if you make that mistake and they do nothing to educate you.

Please don't tell me you don't understand that SquareEnix is completely against 3rd party tools.  They absolutely would classify the parsing plugin as a game hack because it reads game data.

PS.  ACT, the FFXIV parsing plugin and Deucalion are all different projects made by three separate people.

PPS.  I'm going to leave this link in every AV complaint in case anyone wants to read it: https://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/