search

seevik2580 / tor-ip-changer

request new identity every X seconds interval using TOR client
GNU General Public License v3.0
402 stars 119 forks source link

thanks for adding a troyan in 1.2.7 #51

Closed Krautmaster closed 3 years ago

Krautmaster commented 3 years ago

image

Krautmaster commented 3 years ago

image

seevik2580 commented 3 years ago

as i mentioned here... https://github.com/seevik2580/tor-ip-changer/issues/50 its false positive. make exception for folder where you have ipchanger. there is no trojan in my script, but defender and other antiviruses does not like my download function when it download tor.exe file from my github repository also its compiled with py2exe. alot of scripts compiled with py2exe or pyinstaller are false positive trojans

if you dont trust to my compiled version, you can download source code and compile it by yourself.

seevik2580 commented 3 years ago

hi again @Krautmaster i just recompiled ipchanger with nuitka.net instead of py2exe to avoid false positive malware reports. commit 6afd236601d29bbc285a6ecdf61b49db521d937d

ipchanger.exe https://www.virustotal.com/gui/file/be0e4b637b3aa9b282516cc43cd2fa0dbf3c143686eab42a83bd7abef180c5ba/detection

updater.exe https://www.virustotal.com/gui/file/1c8039d46508d48ce5edc1c7137a022962053f0b05450c4fe87a7321d3bafbf6/detection

thanks for reporting this issue

Krautmaster commented 3 years ago

Thx for the clarification. It's always a bit wired to trust the same. I'll test the new commit thanks a lot. Let me know ur PayPal to donate a few bucks for the effort :)

seevik2580 commented 3 years ago

@Krautmaster you can use Sponsor button in right top corner image it will redirect you to my paypal address. thanks a lot, i appreciate it

Krautmaster commented 3 years ago

@seevik2580 sadly the latest rar still gets a false positive https://github.com/seevik2580/tor-ip-changer/blob/master/dist/1.2.7/ipchanger.rar image

seevik2580 commented 3 years ago

@Krautmaster i think your computer doesn't like me 😄 i don't know why my windows defender said its clean, and yours defender said its a trojan also my defender is up to date with no exceptions.. there is another option you can try.. install python 3.7+, download source code of ipchanger from here https://raw.githubusercontent.com/seevik2580/tor-ip-changer/master/source-code-win/1.2.7/ipchanger.py then install dependencies with pip 

pip install urllib3 pysocks nuitka pycurl zstandard

go to folder where ipchanger.py is .. and run script with python ipchanger.py if everything is ok, you can try to compile it with nuitka by youself and then tell me if its still reported as trojan

nuitka --onefile --standalone --plugin-enable=multiprocessing --plugin-enable=tk-inter --windows-disable-console --remove-output .\ipchanger.py

here is proof of my windows defender that iam not lying

https://user-images.githubusercontent.com/22060747/131127609-daf4b980-7f5f-42d2-9027-16e19166b592.mp4

maybe i have to call to microsoft and tell them they are idiots 😄 thats why i love linux.. there is no such problems in linux. anyways thanks for report again :)

seevik2580 commented 3 years ago

According to my research .. version 1.2.7-1 (python 3.7) was fine, version 1.2.7-2 (python 3.7) was fine, version 1.2.7-3 (python 3.4) was fine but didnt worked for some users so i recompile it back with python 3.7 and made it to version 1.2.7-4 .. and then it started to report as false positive trojan.. let me made some tests... looks like i have to go back onto version 1.2.7-2 and start again

seevik2580 commented 3 years ago

@Krautmaster feel free to test version 1.2.7-2 until i fix this mess... you can download it here https://raw.githubusercontent.com/seevik2580/tor-ip-changer/d6bfdb4ecda1e484897dc83ef9eb92c2803503cf/dist/1.2.7/ipchanger.rar then start ipchanger, go to Options then Settings and select Disable Updates.. hit Save

virustotal https://www.virustotal.com/gui/file/bb667a186121a426d48d56855a3ece41f3c4efa29d15e22bc2b4dcc82ae3dbea/detection

seevik2580 commented 3 years ago

@Krautmaster i made some research and looks like older version of py2exe works well.. so i tried to recompile it with version 0.10.2.0

ipchanger v1.2.7-6 uploaded .. commit https://github.com/seevik2580/tor-ip-changer/commit/6c6c0abc8b6ebcaa6594a636d54854052564c06b virustotal https://www.virustotal.com/gui/file/8fbaf6ba7718c589b9f9f002ff56f47f456cb8a645f73ad60280e39ebe78c217/detection

can you test it ? thank you