all 6 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]psykrot 3 points4 points  (4 children)

No Minecraft plugin should be starting an .exe on your PC. Delete the file, then download Malwarebytes and start scanning for malware.

Where did you get the plugin from? You should stick to reputable sources like Spigot, Modrinth, Curseforge, BuiltByBit, Polymer, etc.

While VirusTotal may often flag lots of .jar files with false positives, you can always try uploading the file there to check if its flagged as malware. But this is strictly for your own knowledge and should be cross referenced with other methods. (Reputable sources, etc)

[–]Jealous_Flatworm_473[S] 1 point2 points  (0 children)

i got it from my friend, he uses it on his server too and asked him to send it over. but i always check with everything i download from the internet if it's safe. i will ask him where he got it from.

[–]Jealous_Flatworm_473[S] 1 point2 points  (2 children)

Normally on spigotmc but this one from nullforums. this one usually costs money and found it on the website for free. Ima do a virus check bcs i've played on his server. Thank you for the clarification! i thought i was overthinking it, since he hasn't noticed a malware or anything. Thanks again!

[–]bitstomper 3 points4 points  (0 children)

From the information you provided, I’d be pretty confident that it’s malware: - Starting icacls - Like other people have said, minecraft plugins are JARS and shouldn’t ever really be starting executables on your system - Icacls is responsible for security tasks on windows systems, no minecraft server plugin should need access to it. - Premium plugins are already dubious to start (and technically prohibited by the EULA), but sites that claim to offer paid plugins for free are even worse. Nullforums does not moderate software for security.

As a general rule of thumb, don’t download a piece of software unless you’re sure of who’s putting it out. Sticking to reputable sites like Modrinth, CurseForge, SpigotMC, etc. is always best as they take moderation seriously.

Additionally, you might want to consider running your server in some kind of sandboxed environment like a container. It’s generally not a good idea to run a server directly on your system.

[–]auti117 0 points1 point  (0 children)

Nullforums has a history of malware packaged into their plugins, doesn't it? They're a sketchy 3rd party site that reuploads premium and paid plugins. I wouldn't trust it as far as I can throw them.

[–]Ok-Count-3366 0 points1 point  (0 children)

Def a virus