07th-mod / meakashi

19 stars 16 forks source link

meakashi patch installer.exe flagged as virus/malware #16

Closed ArmandBernard closed 6 years ago

ArmandBernard commented 6 years ago

My antivirus, Bitdefender, blocked "meakashi patch installer.exe" when it ran, claiming it's a backdoor something or other. The weird things is, I didn't even run the file, so that implies it ran itself to be detected. Have your files been infected or is this a false positive? This is a pretty old version of the installer, from June of last year.

welcome[bot] commented 6 years ago

Hello, I'm a bot! I have a few things I want to share that can make your issue a lot simpler to understand. 😊

  1. Did you remember to properly describe what is happening (or what you found)? Giving some clues such as where it happens (like a line of dialog exactly like the one displayed in the game) helps a lot!
  2. If you are having issues installing the patch, did you notice anything strange? Any errors in the command line window that appears while installing the patch?
  3. Please post your computer specs! Knowing if you are running Windows, Mac or Linux helps a lot when answering to issues. If you don't know how to find your computer specs, running dxdiag might help on Windows. Press Windows+R and type dxdiag. In the screen that will appear you can find a button that saves your computer info. Attach that here!
  4. Every Higurashi chapter has a feature that saves a log containing all the tech stuff to fix issues. If your game crashes or looks broken, go into HigurashiEp0*_Data and upload the file output_log.txt for us. :)
ItaloKnox commented 6 years ago

Hey, hello. It's just a false positive. I recommend you to grab the newest installer, though, because if I recall correctly we changed a few things in the installation process and running an older installer will just not work correctly now. It's a 5mb file, so it shouldn't take long to download.

About the false positive, some antivirus software will flag the installer because it works in two steps:

  1. the installer unpacks the dependencies needed to extract and install the patch in the game folder
  2. the installer then autoruns a file that is inside the game folder to continue installation

Because the second step is made on Windows Command Prompt, some antivirus software will get wary. The only way the installer could be infected would be if:

The second point could happen but we never had any issues with that in the past (the project has been going for a few years already) and we audit all the changes that happen in the repositories. Because of that, if anything suspicious happened we would have revoked the collaborator's right to write and reverted the changes before it could have done damage.

In case you don't want to risk yourself (even though you can see the actual code of the installer by going into our resources repository), I recommend you to use the manual installation process.

I hope that clarifies the issue! 😄