Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1.1 not self contained version triggers antivirus #42

Closed
masanbol opened this issue Mar 14, 2023 · 3 comments
Closed

1.1 not self contained version triggers antivirus #42

masanbol opened this issue Mar 14, 2023 · 3 comments

Comments

@masanbol
Copy link

masanbol commented Mar 14, 2023

The 1.1 not self contained version triggers antivirus protection, specifically identified as Trojan:Script/Wacatac. The standalone version does not. Screenshot attached.

Screenshot 2023-03-14 112420

@marzent
Copy link
Owner

marzent commented Mar 14, 2023

This is most likely because of the Deucalion dll injection.

Here is a VT scan of the release in question: https://www.virustotal.com/gui/file/cd91c033caf526b7f58800df6dc9a8aedc48c076e6747e31b604803cec4f35bc/detection

All of the hits are from some kind of generic ML algorithm (like "Gen:Variant."). If you are concerned about security feel free to compare the release to the CI build artifact.

The standalone version probably doesn't get flagged because it is more heavily packed (but executes the same code; showing just how bad most of these AV detections are)

@marzent marzent closed this as completed Mar 14, 2023
@masanbol
Copy link
Author

I figured as much - thought you might want to be aware or put something in the readme about it. Thanks!

@marzent
Copy link
Owner

marzent commented Mar 14, 2023

No worries, wasn't sure what you were asking originally in the issue.
Work is underway to provide Dalamud based network data, which should stop flagging IINACT itself as malware as well.

@marzent marzent pinned this issue Mar 15, 2023
@marzent marzent unpinned this issue Dec 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants