DeMalware-RETRO

DeMalware-RETRO v2.8.6-Aegis Security Update

Features:

• Java 25 & Adoptium Compatibility: Resolved class loader major version 69 compatibility issues by dynamically spoofing bytecode headers before parsing with ASM, restoring original version info on output byte arrays.
• Robust System Socket Hook: Overrode named modules loader callbacks on Java 9+ and triggered early retransformation at agent startup, enabling reliable outbound connection monitoring on Java 17 to Java 25+.
• Standard Libraries Bypass Filter: Bypasses scans for all standard packages (org/apache/, com/google/, org/slf4j/, com/sun/jna/, oshi/, org/yaml/, io/netty/, it/unimi/dsi/fastutil/, org/sqlite/, com/mysql/, org/mariadb/, com/zaxxer/hikari/, org/h2/, org/fusesource/, org/jline/, me/lucko/, net/luckperms/, org/spongepowered/, net/kyori/, com/velocitypowered/, net/neoforged/, net/neoforge/, org/codehaus/) to completely prevent conflicts, NoSuchMethodErrors, or VerifyErrors on Java 25 / Paper 1.21.11.
• l/M/x Trojan Blocker & Scanner: Automatically intercepts and neutralizes the notorious l/M/x trojan at early boot class loading, and performs background .jar scans for signature presence.
• Minecraft 26.2 & 26.1 Support: Formally declares compatibility and updates Modrinth/Hangar platform metadata to support Minecraft 26.2 and 26.1.
• Core Engine Bypass Filters: Prevents scanning on Mojang, Minecraft, Spigot, Bukkit, Paper, and Folia internal packages to eliminate false positive warnings and server startup crashes (e.g. Mojang DFU NbtVisitor or RegistryUnfreezeFixer).
• Folia Multi-threading Compatibility: Native support for Folia region-threaded server cores by migrating all scheduler pings, update checks, and notification tasks to thread-safe Java executor backends.
• Central Threat Incident Logging: Real-time collection and secure reporting of blocked class transformation violations, ForceOP attempts, and tampering events to the licensing panel.
• Universal Multi-Version Support: Target class bytecode compiled to Java 8 with legacy Spigot dependencies to support all servers from Minecraft 1.8 through 1.21.4+.
• Asynchronous Safe Polling: Threat uploads occur out-of-band in separate worker scheduler threads to prevent JVM early classloading deadlocks.
• Storage-Optimized Rotation: The backend restricts saved logs per license to keep database footprints lightweight and fast.