teknogods / OpenParrot

Open Source version of TeknoParrot by NTA, avail and Reaver
GNU General Public License v3.0
246 stars 49 forks source link

OpenParrotLoader.exe flagged as Trojan:Win32/Sabsik.TE.A!ml #156

Closed HQuest closed 3 years ago

HQuest commented 3 years ago

After downloading the OpenParrotWin32.zip from the releases section of this Github repo, Windows Security is flagging the OpenParrotLoader.exe as malware. Other vendors are flagging it as well - see https://www.virustotal.com/gui/file/b9d2bb4de2fd06781bba9d231f110ae3728f5f3d8732dcd044381d5df0161722/detection

nzgamer41 commented 3 years ago

Yeah this happens, it's a false positive, it comes up because openparrotloader injects our DLL (openparrot/teknoparrot(64).dll) into the games rather then modifying them and releasing hacked exes per game. This injecting of a dll into an application is similar to how some malware works, however with teknoparrot it is a false positive. We've tried appealing it with antivirus vendors eg Microsoft Defender however that only covers that specific release and due to our continuous integration it's impractical to send the files to vendors every time a commit is made.

EDIT: For clarity when we've appealed in the past the false positive has been removed but it always eventually shows up again, I can post evidence if people are concerned.

Thank you however for bringing this up!