search

KARPED1EM / TownOfNext

An AmongUs mod with learning & love
https://tonx.cc
GNU General Public License v3.0
58 stars 32 forks source link

TONX is reported as a Trojan by anti-virus software #159

Closed GD825 closed 9 months ago

GD825 commented 9 months ago

windows defender is auto deleting the dll and reporting it as a trojan.. any idea why it thinks so?

KARPED1EM commented 9 months ago

I don't know much about anti-virus, here are my guesses:

  1. Trojans often obtain some information from attackers by connecting to the network. TONX will obtain real-time announcements and new version information through the Internet. Such operations may be considered Trojan behavior by anti-virus software. Here are the relevant code locations:
  1. Trojans often transmit part of the victim’s computer information by connecting to the attacker’s server. TONX’s anti-cheating system, EAC, attempts to connect to TONX’s servers and report the cheater’s information. And if you enable the option "Request TONX-Chan to share your lobby number to Discord", then TONX-Chan will also try to send your lobby code to TONX's server. Such operations may also be considered Trojan behavior by anti-virus software. Here are the relevant code locations:

The second part above has been abandoned in TONX, and the TONX server has been completely shut down. Therefore, TONX will only check the new version information at startup and will not upload any of your information to our server. Please rest assured.

KARPED1EM commented 9 months ago

If you still have doubts about the security of TONX, please try other mods. If you believe me, try adding TONX.dll to the ignore list of Anti-Virus software to play normally.

GD825 commented 9 months ago

its wierd b/c it doesnt report it as one for myself, but for one of the people that hosts , with the same antivirus setup as me, her system reports it as a trojan and auto deletes it from the download, or refuses to let her download just the dll. but me and and another player with the same anti virus program as her, doesnt have that issue at all

KARPED1EM commented 9 months ago

its wierd b/c it doesnt report it as one for myself, but for one of the people that hosts , with the same antivirus setup as me, her system reports it as a trojan and auto deletes it from the download, or refuses to let her download just the dll. but me and and another player with the same anti virus program as her, doesnt have that issue at all

That makes sense, only the host would try the suspected trojan behavior I mentioned above. I will remove the relevant code in the next version, which may solve the problem ig

GD825 commented 9 months ago

thats the thing tho, she cant even load up the mod b/c it deletes the dll before it even makes it to the folder location of the mod, and refuses to let her download the dll solo, so she cant even get the dll onto her system

KARPED1EM commented 9 months ago

Cloud related code has been disabled in dev build If this issue is not resolved after released, please reopen this issue