We maintain a cache of all RockPatch versions on our server, and some random wannabe security company claims they're virus-infected.
That in and on itself is not surprising and new, the crappier companies regularly identify things like RockPatch, NPatch or Ares as threats, because their behavior is a little more "exotic" than your run of the mill calculator or web browser.
It has, however, made me realize that, for one, there is no way to obtain a comparison sample: I didn't find any versions on either forum, Google only led me back to our own cache, Gordon's repository seems gone, and VK's exists, but the files 404.
In other words, as much as I'm sure the files are clean, I can't confirm it.
For two, given that we do seem to be the last server hosting these files, and given past years' discussion of which patches to use for new mods, I'm wondering if anyone is actually still using RockPatch?
Don't get me wrong, I'm all for maintaining an archive of it, but if no active or relevant mod still requires versions of RP, I could wrap the versions in a way that's less readily accessible to automated scanners, leading to less trouble with my host and security companies.
So, long story short:
- Does anyone have RockPatch versions downloaded directly from RTB or from there via proxy they could either upload or provide the md5 hash of?
- Does anyone know of any current reason to use RockPatch over Ares or NPatch and its successors? (e.g. certain mods still using it, features in them...)
- If you downloaded an RP-version from our cache, check back to see if you should worry.
Once again, I'm sure it's a false positive, I'm just concerned by the fact that I can't readily prove it.