TL;DR: There is no actual proof of tlauncher containing any malware. Other posts are only fear mongering. TLauncher does however do some shady things What we do now know: TLauncher sends back the following information to their servers unless you disable it in the settings: Operating System: Linux, Windows or MacOS) Java Version Screen Resolution TLauncher Version OS Version: OS.VERSION Tlauncher Internal UUID: Automatically generated on first launch using randomUUID() CPU Information "GPU Information": This includes A LOT of information about your monitors, Audio Devices (aka headphones/speakers), microphones, "DirectInput Devices" (mouse and keyboard), "USB Devices", "Gameport Devices", "PS/2 Devices", "Disk & DVD/CD-ROM Drives", "System Devices" as well as a bunch of other miscelaneous information. You can see what this information looks like on your device by running these commands on the Command Prompt (cmd.exe): touch %USERPROFILE%\Desktop\test.txt && dxdiag /whql:off /t %USERPROFILE%\Desktop\test.txt && notepad %USERPROFILE%\Desktop\test.txt GPU RAM Sensitive user data is NOT logged. Only hardware and system information is uploaded. TLauncher sends back the following information to their servers unless you disable it in the settings: Operating System: Linux, Windows or MacOS) Operating System: Linux, Windows or MacOS) Screen Resolution Screen Resolution TLauncher Version TLauncher Version OS Version: OS.VERSION OS Version: OS.VERSION Tlauncher Internal UUID: Automatically generated on first launch using randomUUID() Tlauncher Internal UUID: Automatically generated on first launch using randomUUID() CPU Information CPU Information "GPU Information": This includes A LOT of information about your monitors, Audio Devices (aka headphones/speakers), microphones, "DirectInput Devices" (mouse and keyboard), "USB Devices", "Gameport Devices", "PS/2 Devices", "Disk & DVD/CD-ROM Drives", "System Devices" as well as a bunch of other miscelaneous information. You can see what this information looks like on your device by running these commands on the Command Prompt (cmd.exe): touch %USERPROFILE%\Desktop\test.txt && dxdiag /whql:off /t %USERPROFILE%\Desktop\test.txt && notepad %USERPROFILE%\Desktop\test.txt "GPU Information": This includes A LOT of information about your monitors, Audio Devices (aka headphones/speakers), microphones, "DirectInput Devices" (mouse and keyboard), "USB Devices", "Gameport Devices", "PS/2 Devices", "Disk & DVD/CD-ROM Drives", "System Devices" as well as a bunch of other miscelaneous information. You can see what this information looks like on your device by running these commands on the Command Prompt (cmd.exe): touch %USERPROFILE%\Desktop\test.txt && dxdiag /whql:off /t %USERPROFILE%\Desktop\test.txt && notepad %USERPROFILE%\Desktop\test.txt Sensitive user data is NOT logged. Only hardware and system information is uploaded. Sensitive user data is NOT logged. Only hardware and system information is uploaded. TLauncher automatically removes some servers, and it also redirects some .ru servers to other servers . It is unclear to me what's the point of doing those redirects, but the removal of servers is clearly done out of maliciousness. Here is a complete list of the banned and redirected servers: http://repo.tlauncher.org/update/downloads/configs/inner_servers.json https://tlauncher.org/repo/update/downloads/configs/inner_servers.json http://advancedrepository.com/update/downloads/configs/inner_servers.json

TLauncher automatically removes some servers, and it also redirects some .ru servers to other servers . It is unclear to me what's the point of doing those redirects, but the removal of servers is clearly done out of maliciousness. Here is a complete list of the banned and redirected servers: http://repo.tlauncher.org/update/downloads/configs/inner_servers.json http://repo.tlauncher.org/update/downloads/configs/inner_servers.json https://tlauncher.org/repo/update/downloads/configs/inner_servers.json https://tlauncher.org/repo/update/downloads/configs/inner_servers.json http://advancedrepository.com/update/downloads/configs/inner_servers.json http://advancedrepository.com/update/downloads/configs/inner_servers.json Suspicious things: The source code shows that TLauncher looks for the "KB4515384" windows update. My theory is that that windows update was very problematic for many users , which is why tlauncher suggests users to remove it The source code shows that TLauncher looks for the "KB4515384" windows update. My theory is that that windows update was very problematic for many users , which is why tlauncher suggests users to remove it If minecraft crashes, Tlauncher starts a process called TLauncherUpdater.exe . This text is associated to that: crash.switch.antivirus.system=Try to turn off the antivirus and restart the launcher, if this does not help, you can try to remove the antivirus and check again ... crash.switch.antivirus.system.auto=The launcher will start fixing the problem after closing this message (you may need administrator access, in this case, allow the launch from the administrator). <br> Wait 20 seconds and restart the computer, then check if the problem is resolved . This seems to be a benign process that just tries to fix an issue caused by antivirus software flagging some files that it shouldn't. I'm not completely certain though, as I was unable to reverse engineer this exe. If minecraft crashes, Tlauncher starts a process called TLauncherUpdater.exe . This text is associated to that: crash.switch.antivirus.system=Try to turn off the antivirus and restart the launcher, if this does not help, you can try to remove the antivirus and check again ... crash.switch.antivirus.system.auto=The launcher will start fixing the problem after closing this message (you may need administrator access, in this case, allow the launch from the administrator). <br> Wait 20 seconds and restart the computer, then check if the problem is resolved . This seems to be a benign process that just tries to fix an issue caused by antivirus software flagging some files that it shouldn't. I'm not completely certain though, as I was unable to reverse engineer this exe. In conclusion , TLauncher has some shady business practices and collects a bit too much information by default. Their banning and redirection of certain minecraft servers isn't mentioned anywhere on their website. The analytics setting can be disabled in the settings, although it also isn't mentioned on their website at all. Despite all of this, TLauncher 2.86 (the version I've analyzed) has no way of spying its users; It's not been programmed. So don't panic, TLauncher IS NOT MALWARE and you don't need to uninstall it. But it's worth looking for another launcher Reddit reReddit: Top posts of December 15, 2022 Reddit reReddit: Top posts of December 2022 Reddit reReddit: Top posts of 2022 Best of Reddit in Portuguese Best of Reddit in German Reddit, Inc. © 2026. All rights reserved. Join the most real place on the internet By continuing, you agree to our User Agreement and acknowledge that you understand the Privacy Policy .