Caeden117 / ChroMapper

GitHub repository for ChroMapper, the Unity-based map editor for Beat Saber.
https://cm.topc.at/dl
GNU General Public License v2.0
295 stars 86 forks source link

CML.EXE contains a trojain! Bearfoos.A!ml #496

Closed dylanforcegaming closed 7 months ago

dylanforcegaming commented 7 months ago

ChroMapper version unkmown but latest of this date

Describe the Issue Detected Trojain: Trojan:Win32/Bearfoos.A!ml Details: This program is dangerous and executes commands from an attacker. Affected items: file: C:\Users*Confidential*\Downloads\CML.exe (Installer File) Provide Screenshots or Videos image

Expected Behavior Run Installer - open chromapper - make maps - export to beat saver

What Happened Installs Exe - (Windows Security) Trojain Detected! - tries to kill file - regains ability - Tries For 5 mins - finally kills file Additional Context i've had my expectations with this program but after a while i reinstalled it and it gave me a trojain. i have lost respect for this and will not be using it for futher use untill fixed, thank you.

Caeden117 commented 7 months ago

The ChroMapper Launcher source code is available here. You can verify the source code yourself to conclude that it is not a "trojain".

Windows Defender is likely tripping over one (or more) of these things:

Furthermore, you can verify that your ChroMapper Launcher is verified and safe by checking its digital signature. ChroMapper Launcher is signed by Top Cat.

image

Unfortunately, there is not a lot we can do on our end to prevent Windows Defender from flagging the Launcher as malicious. My personal recommendation is to move the ChroMapper Launcher outside of the Downloads folder and try again. Safe places usually include any secondary mass storage drive, C:\Program Files, or your Desktop folder.

If none of this convinces you otherwise, please consider building ChroMapper from source by following the build guide, if that gives you peace of mind.

dylanforcegaming commented 7 months ago

@Caeden117 ok thank you, but i think id recommend that in the next update its included that it can get flagged as a trojain. i think it would help alot of people and reassure them!👍

dylanforcegaming commented 7 months ago

@Caeden117 hey ive tried but it wont open because it thinks its a virus