search

mezz / JustEnoughItems

Item and Recipe viewing mod for Minecraft
https://www.curseforge.com/minecraft/mc-mods/jei
MIT License
770 stars 301 forks source link

[Other]: flagged as trojan #3612

Closed Flyingwagons closed 1 month ago

Flyingwagons commented 2 months ago

Other

Whenever I download any version of 1.21 JEI my computer antivirus flags it as a trojan. I do not know if this is a problem with the mod or my computer, but my computer was fine with every other mod and every other version 1.20.6 and below. I did not know if this qualified as a bug as this not affect the game itself.

SilenceWolf commented 2 months ago

Same for me, it says that there is a virus that is executing command so i delted it just in case.

bin200 commented 2 months ago

Version 15.8.0.16 for Fabric 1.20.1 had this issue for me as well.

mezz commented 2 months ago

Hmm thanks for letting me know. This is probably a false positive, JEI is open source and the CI builds from the source. I'll compare 15.8.0.16 for Fabric 1.20.1 to the source code to verify that nothing has been compromised.

mezz commented 2 months ago

The jar from CurseForge is identical to the jar I can build from source, so this is just a false positive.

SilenceWolf commented 2 months ago

The jar from CurseForge is identical to the jar I can build from source, so this is just a false positive.

And for fabric 1.21?

VulcanDVex commented 2 months ago

Version 15.8.0.16 for Fabric 1.20.1 had this issue for me as well.

Forge Version of that one as well.

mezz commented 2 months ago

Which antivirus is flagging things? I can try to submit an appeal to them.

bin200 commented 1 month ago

Which antivirus is flagging things? I can try to submit an appeal to them.

Flagged by Windows 10's built-in Virus & threat protection / Microsoft Defender Antivirus

image

SilenceWolf commented 1 month ago

Which antivirus is flagging things? I can try to submit an appeal to them.

Windows 11 anti-virus / microsoft defender

mezz commented 1 month ago

I really don't know why they're flagging it. See the VirusTotal results here: https://www.virustotal.com/gui/file/e47d5172bdad9c74bd902c37518c98eececdaf0e69a0fa75c21c55e6b797a401

Screenshot 2024-07-22 at 11 13 53 AM

mezz commented 1 month ago

I will follow Microsoft's submission process here: https://www.microsoft.com/en-us/wdsi/filesubmission/ It looks like the only way to appeal is to make them manually analyze it, may take a while.

TheMasterBlaster commented 1 month ago

Seems some other mods are having a similar issue. I haven't been able to download the Collective mod from any source I have tried.

mezz commented 1 month ago

I haven't received any updates from Microsoft. I assume if enough people submit these files to them, they will eventually take action. If you have time, please submit one of these many jar files to microsoft.com/en-us/wdsi/filesubmission so they can analyze it and fix their detection methods.

mezz commented 1 month ago

I still haven't received any updates from Microsoft, the case is pending.

TheMasterBlaster commented 1 month ago

Seems Windows Defender isn't flagging JEI or any of the other mods as a virus, like it was doing before.

mezz commented 1 month ago

Ok thanks, I'm glad that's over.