Is this translation patch secretly a virus?

[furthestreaches]

I tried downloading an English translation patch for Castlevania: Rondo of Blood. Halfway through the download, it was flagged by Windows Defender as dangerous.

Specifically, it said it contained "Worm:AndroidOS/ZkarletFlash", which has an entry within their encyclopedia of recorded malware.

Is this a genuine threat, or merely a false positive?

 

[gameboy64]

I tried downloading an English translation patch for Castlevania: Rondo of Blood. Halfway through the download, it was flagged by Windows Defender as dangerous.

Specifically, it said it contained "Worm:AndroidOS/ZkarletFlash", which has an entry within their encyclopedia of recorded malware.

Is this a genuine threat, or merely a false positive?

Have you tried other similar patches (if they exist)?

 

[furthestreaches]

Have you tried other similar patches (if they exist)?

This is the only English translation patch on the site that's available for Rondo of Blood on the PC Engine.

 

[krakenx]

Probably a false positive, but I wouldn't use the patcher included with it if it has one. The patch itself should be safe since it's basically just a diff file with the changes from the original game. Running the game should be safe since it's extremely uncommon for a game to be able to break out of the emulators sandbox.

 

[plasmagrass]

If you search "Worm:AndroidOS/ZkarletFlash", you'll find a lot of open source projects are marked with this. I'd say it's most likely false positive. These kind of detections are based on heuristics, and are not accurate.

Post automatically merged: Apr 8, 2025

> it's extremely uncommon

Project 64 1.6 just recently (1 year ago?) got out-of-sandbox exploit, so it's not that impossible.

 

[koffieleut]

Glad you're not asking about Yakuza Black Panther 70% translated from isohunt back in the days.