dxxxxy / EssentialCosmeticsUnlocker

Client-side only patch that allows you to unlock ALL cosmetics (+ emotes) in the Essential mod. Works on every version of Essential MC (1.8.9 - 1.20.6).
GNU General Public License v3.0
76 stars 7 forks source link

ECU is flagged by VirusTotal #54

Closed IAmSomeoneLol closed 4 weeks ago

IAmSomeoneLol commented 3 months ago

i found a comment on reddit about this mod and decided to give it a try, though I am always sceptical about mods and check them for viruses, so when I went to VirusTotal and uploaded it, there were 2 detections, from Google and Ikarus "Exploit.JAVA.Banload". I didn't run the mod for that reason so now I'm wondering if this is like an Issue or true.. image

dxxxxy commented 3 months ago

Why open this kind of issue on Github? There is nothing I can do to solve this. If, with your judgment, you think you should not use this, then do not.

IAmSomeoneLol commented 3 months ago

Why open this kind of issue on Github? There is nothing I can do to solve this. If, with your judgment, you think you should not use this, then do not.

I mean no offense here, but when it comes to Viruses it's a big thing for me personally. I was just wondering if this was a Known thing cause I hadn't seen it mentioned anywhere on the Description.

PureFallen commented 2 months ago

Virus Detection this days is moving away from a standalone "I detect a virus by it's signature" approach because there are to many methods into bypassing this. Modern solutions will try for more dynamic scans that will try to evaluate a software through heuristic. Think of it as "when it behaves like known malware, it will probably be malware".

ECU does things that are rather unusual for a Minecraft Modification in order to interact with Essential. It does share a lot of things with malware in this regards which makes it so that a handful of false detections through Antivirus software is to be expected. Definitely not worthy a Github issue however. Not a lot the developer can do other than trying to add evasion methods that in itself might as well trigger differently antivirus heuristic detections. A game of Whack-A-Mole that would go on forever.

nscwb commented 2 months ago

I can confirm it is safe to use. Enjoy.