Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

In this Discussion

If requesting help, make sure to mention what game you are attempting to use ACT with.
For the best FFXIV support, join Ravahn's Discord Server. Also check out OverlayPlugin's FFXIV FAQ and Setup Guide.

malware PUA:Win32/GameHack detected on Windows system

As in the title, my Windows Defender identified this well known malware originating from AppData\Roaming\Advanced Combat Tracker\Plugins\deucalion-1.2.1.dll

This is very concerning. After checking my defender history, turns out this malware was blocked multiple times since the version available on 05-05-2025.

Comments

  • I would be grateful for information whether this .dll is a part of ACT project itself since it is in the main \Plugins directory and not in a specific subdirectory like \OverlayPlugin, or should I try and notify authors of the plugins about this possible malware threat.
  • edited May 20
    You accepting their fearmongering is the first problem.

    PUA = Potentially Unwanted Application.  Not malware.
    Win32 = Windows.  Not malware.
    GameHack = Something involving directly accessing a game.  Not malware.

    Why are you calling it malware?  Probably because AV companies don't care if you make that mistake and they do nothing to educate you.

    Please don't tell me you don't understand that SquareEnix is completely against 3rd party tools.  They absolutely would classify the parsing plugin as a game hack because it reads game data.

    PS.  ACT, the FFXIV parsing plugin and Deucalion are all different projects made by three separate people.

    PPS.  I'm going to leave this link in every AV complaint in case anyone wants to read it: https://blog.nirsoft.net/2009/05/17/antivirus-companies-cause-a-big-headache-to-small-developers/

Sign In or Register to comment.