search

brianuuu / AutoController_swsh

Automation for various tasks in Pokemon Sword & Shield and other Pokemon games on Nintendo Switch
72 stars 19 forks source link

Launcher flagged as a trojan by some antivirus software? #11

Open Phybersaur opened 2 years ago

Phybersaur commented 2 years ago

I just extracted the latest version of this (AutoController-by-brianuuuSonic-v5.0.0) and Microsoft Defender started shouting about AutoControllerHelper_Launcher being a trojan (Trojan:Win32/Wacatac.B!ml). I wasn't convinced (Microsoft Defender can be a bit odd sometimes) so I ran it through MalwareBytes and it didn't find anything, so I was kinda conflicted as to whether or not to run it.

In the end, I uploaded it to VirusTotal (see link above) and asked it to reanalyze the file, and it came out with the result: https://www.virustotal.com/gui/file/fed1f4fc3f2ed7308e321e5abdf235b5ae3224abda5871d4bf6c8f7113f6e610/detection

31/67 security vendors flagged this file as malicious

Not sure why this is the case, though?

EDIT: After re-reading my original post, I thought I should edit just to clarify that I don't think that this is a trojan; this software has been very highly regarded and referenced in many other projects, so if it was malicious then I'm pretty sure someone would've spotted it by now :joy: It's just not mentioned in the documentation (as far as I could see) and normally it's mentioned if it's flagged as a false positive?

brianuuu commented 2 years ago

The launcher does nothing but open the AutoControllerHelper.exe in the AutoControllerHelper folder, so yes it is a false positive. If you are still not sure you can always just manually open the main .exe or create a shortcut of it