search

xADDBx / Isaac-Online-Modded

0 stars 0 forks source link

exe file is being flagged by windows defender as a trojan #1

Open Furpo opened 9 hours ago

Furpo commented 9 hours ago

image

xADDBx commented 8 hours ago

The tool patches the game's binary to change how it behaves. Some trojans/malware do bad stuff in a similar way, so AVs flag the file because it's suspicious.

You can look at the code; The release file is just the compiled project.
The Project does 3 things, GUI, finding the exe and patching. The patching can be seen here: https://github.com/xADDBx/Isaac-Online-Modded/blob/master/IsaacOnlineModded/GamePatcher.cs#L60

Example: This is the release file on VirusTotal. Notably flagged from 25/72 Vendors. This is the same compiled project, just with a black icon, on VirusTotal. I only added an icon to the file, and now only 13/72 Vendors flag the file. As this hopefully clarifies, AVs like to flag things based on being somewhat similar to other software, which, especially for small tools like this one, can often result in false positives. (