• *
  • Agent
  • Offline

Topic: Possible Perpetuum-related Trojan?

I have no idea if this is related to Perpetuum or not but...

I was running PO on 2 clients when 1 of the clients died.  When I tried to restart it, I was unable to do so (it came up, then crashed).  I then checked out my task manager to see if it was "running" but not displaying and, lo and behold, I found a weird looking process called:

r.exe

A quick google search shows this to be a type of Spyware or Trojan.

I did a search on my computer to see where this file was.  Found it in:

C:\Program Files (x86)\Perpetuum

I'm not claiming this is PO related or that PO is the cause...only that I find it weird that it happened to install itself there.  Once I removed it, I was able to start up PO w/o any issues.

  • DEV
  • Developer
  • Offline

Re: Possible Perpetuum-related Trojan?

There was a Perpetuum client update about an hour ago and updating is done automatically when you start Perpetuum.

r.exe is a temporary file created when updating the Perpetuum client, this is normal behavior. Some antivirus programs might see this as suspicious though.

If you ran 2 clients from the same place, that is probably the reason why it couldn't start because the other instance of the client was still hogging the perpetuum.exe so it couldn't be updated.

  • *
  • Agent
  • Offline

Re: Possible Perpetuum-related Trojan?

Thanks for the response.  That explains it!