Store Page
Cities: Skylines
All Discussions Screenshots Artwork Broadcasts Videos Workshop News Guides Reviews

Cities: Skylines

Store Page
View Stats:
Global Achievements
This topic has been locked
ReptilianElite 13 Apr, 2022 @ 1:14am
MALWARE WARNING: More Effective Transfer Manager (continued)
The latest update of METM(continued) v2.2.0.220410 includes code that bypasses the Steam Workshop and downloads a mod to your local folder called harmony2. If you open the harmony2 folder you will find harmony2.dll.

Windows explorer shows that the author of harmony2.dll is Chaos aka HolyWater/Drok - who was banned for bypassing the steam workshop to install malicious code on users computers.

I would post this comment on the METM(cont) page, but disappointingly, @cambrium who took over development of this mod for pcfantasy refuses to listen to user feedback and has turned comments off on their mod.

As of now, I have uninstalled METM(continued) and reported it for bypassing the Steam Workshop and I hope you will do the same.

Use this mod at your own risk!! :steamfacepalm:

Link to unsubscribe: https://gtm.you1.cn/sharedfiles/filedetails/?id=2747441985
< >
Showing 1-15 of 88 comments
FlareFluffsune 13 Apr, 2022 @ 1:24am 
So it downloads this: https://gtm.you1.cn/sharedfiles/filedetails/?id=2040656402

?

You realise it literally states that Harmony is a required dependence, literally almost every mod that adds advanced features requires it. You should do some research before spouting rubbish, Harmony is a patching library and used by at least 2 dozen games to patch mods gracefully into a game. Not to mention it literally states, literally, on the Harmony page that some mods Will force a download because it will not work without it!

https://github.com/pardeike/Harmony
Last edited by FlareFluffsune; 13 Apr, 2022 @ 1:34am
#1
mech2112 13 Apr, 2022 @ 1:30am 
Harmony is not malware, it does not bypass steam workshop, scanned it with malwarebytes and antivirus no virus found. It is dependent on the mod, the mod is safe. .dll is dynamic linked library not malware.
#2
ReptilianElite 13 Apr, 2022 @ 1:39am 
Of course I see the requirement for Harmony2.2-0. Thanks for your unhelpful comment @FlareFluffsune. Read my post again if you don't understand.
#3
ReptilianElite 13 Apr, 2022 @ 1:41am 
After METM (continued) loads the method OnLevelLoaded() it looks for additional harmony dependencies that are only found in the Chaos version of Harmony. After it fails to find them it downloads the Chaos version and stores it in your local directory.

You can see proof of this in the directory-- AppData\Local\Colossal Order\Cities_Skylines\Addons\Mods\harmony2.

Download the mod and check it out if you don't believe me.
#4
MaxFX 13 Apr, 2022 @ 1:42am 
Harmony 2.2-0 by 'Boformer' is safe to use and a dependancy for a lot of mods.

Harmony (redesigned; 2.2 update available, see inside) by 'Chaos' and 'I found Colossal Order Keylogger' (previously known as Holywater, but all these Steam accounts are from the same sad worthless individual) contains malware. Avoid that one!!

As for 'More Effective Transfer Manager (continued) by 'cambrium'; Its creator has indeed turned of comments on the mods Workshop page. There were many startup issues, and I still don't fully trust this mod. Especially considering that the previous one by 'pcfantasy' still works fine, so there was no need to make a new version...
#5
ReptilianElite 13 Apr, 2022 @ 1:46am 
@MaxFX - agreed about the safety of the real Harmony 2.2-0 by Boformer, but your comment still misses the point.

This additional harmony2 folder did not appear until this latest update to METM (continued). The dll file included in the folder lists Chaos as the author.

Download it and see for yourself.
#6
FlareFluffsune 13 Apr, 2022 @ 1:49am 
Do you even use anti-malware?
#7
ReptilianElite 13 Apr, 2022 @ 1:50am 
@FlareFluffsune :steambored: get lost
#8
FlareFluffsune 13 Apr, 2022 @ 1:53am 
Is the reality of if the mod was malware your anti-malware would have popped up by now sinking in?
#9
ReptilianElite 13 Apr, 2022 @ 1:54am 
@MaxFX - Thanks for your understanding. Just trying to help others stay safe. I hope I'm wrong but its pretty fishy.
#10
kristofburger 13 Apr, 2022 @ 1:59am 
Originally posted by FlareFluffsune:
Is the reality of if the mod was malware your anti-malware would have popped up by now sinking in?
If you were familiar with the whole Chaos thing, you'd know that anti-malware apps will not catch it. It is specific to Cities: Skylines only.
Last edited by kristofburger; 13 Apr, 2022 @ 1:59am
#11
MaxFX 13 Apr, 2022 @ 2:02am 
Originally posted by FlareFluffsune:
Do you even use anti-malware?
Why risk it if you can easily avoid it? As I mentioned, the original version of that mod works fine, so there was no need for a new one (just like Network Extensions 3 btw). The comments section is turned off, and RokoeSqualo found out how it works and is warning you about it!!

Why neglect all these warnings and signs?
Last edited by MaxFX; 13 Apr, 2022 @ 2:08am
#12
NeonSkyline 13 Apr, 2022 @ 2:06am 
Wouldn't steam block uploading malware in the first place?

And wondering why Holy Water/Chaos accounts have not been deleted yet.
#13
ReptilianElite 13 Apr, 2022 @ 2:22am 
Please move along if you don't have anything of value to add to the conversation @FlareFluffsune. Take your walls of text with you. Nobody gonna read that :steambored::steambored::steambored:
#14
FlareFluffsune 13 Apr, 2022 @ 2:26am 
Originally posted by RokoeSqualo:
Please move along if you don't have anything of value to add to the conversation @FlareFluffsune. Take your walls of text with you. Nobody gonna read that :steambored::steambored::steambored:

So you're gonna leave then? Because none of your comments have been adding any value or even attempted to make a counter-argument to logical points.
#15
< >
Showing 1-15 of 88 comments
Per page: 1530 50

Cities: Skylines > General Discussions > Topic Details
Date Posted: 13 Apr, 2022 @ 1:14am
Posts: 88

Discussions Rules and Guidelines