tiann / KernelSU

A Kernel based root solution for Android
https://kernelsu.org
GNU General Public License v3.0
9.76k stars 1.59k forks source link

Detected Trojan:Script/Wacatac.B!ml in KernelSU_v0.7.0_11326-release.apk #1092

Closed RobertsGhostBusterFan closed 10 months ago

RobertsGhostBusterFan commented 10 months ago

Describe the bug Detected Trojan:Script/Wacatac.B!ml

To Reproduce Steps to reproduce the behaviour:

  1. Go to 'Windows Subsystem for Android', Apps KernelSU in app settings for updates"
  2. Click on 'Download and try to install KernelSU_v0.7.0_11326-release.apk from System and Files' Windows Security blocks and deletes the file as it says it Detected Trojan:Script/Wacatac.B!ml in newest version released.

Expected behaviour A clear and concise description of what you expected to happen. like build KernelSU_v0.6.9_11272-release which was not detected as having a Trojan that what I would Expected to be the normal behaviour, but these things happen.

Screenshots

image image

Smartphone (please complete the following information):

tiann commented 10 months ago

KernelSU is opensource, the manager is build from Github Action directly.

Please tell me which part of the code is "Detected Trojan:Script/Wacatac.B!ml".

RobertsGhostBusterFan commented 10 months ago

all I know is , that Windows Security deleted it when I tried to install it in Windows Subsystem for Android, I already reply to your other message, but I reply to this one too, again I don't know which part of the code is detected as that, I just a home user using it with my desktop pc, for play store access outside of my samsung galaxy device, sometimes I like to use play books on windows 11, besides reading stuff on my android hardware itself. anyway I hope it helps the hardware info, I don't really know why windows 11 detected it as a Trojan the newest build, I am guessing something was written in the update that set off windows Security otherwise I don't really know, I am a pc gamer not a person what would know much about code itself.

using WSA_2308.40000.3.0_x64 from https://github.com/MustardChef/WSABuilds/releases/tag/Windows_11_2308.40000.3.0 website. using the Windows 11 x64 build since I am using a x86_64 type pc.

image image

it does not give me which part of the code is "Detected as Trojan:Script/Wacatac.B!ml" it just deletes it when I tried to install it, I have no idea where to find and detected that on Windows 11, when I downloaded the update from the KernelSU_v0.6.9_11272-release build reads as clean and doesn't detect this problem but for whatever reason the update gets deleted on Windows 11. Sorry but I can't be any more help than this, as far as I know. their was no detected problems from v.0.6.9 when I downloaded it, so something in the new build is setting off windows Security under windows 11 on my desktop pc.

my desktop hardware information if its helpful is below,

DxDiag.txt

https://valid.x86.fr/qc58qe

CPU-Z app info from my desktop

image

tiann commented 10 months ago

I can do nothing for that.

RobertsGhostBusterFan commented 10 months ago

ok, I replied to that So stop using the stupid windows security, I don't have a fix for that yet, as I need windows 11 on my pc, for my cooler master case. since the IRIS device has no linux software for it. I tried a few linux distro, on my older desktop but I haven't found much hardware support when it comes to stuff for this desktop, case works fine in windows but linux the iris screen is blank, and doesn't have masterplus linux software yet.

https://www.coolermaster.com/catalog/cases/full-tower/haf-700-evo/

https://github.com/tiann/KernelSU/security/advisories/GHSA-wf47-f72p-rh23#advisory-comment-90048