SpaceMonkey icon indicating copy to clipboard operation
SpaceMonkey copied to clipboard

Windows detects bladabindi trojan.

Open thetruth1984 opened this issue 3 years ago • 11 comments

False positive?

thetruth1984 avatar Apr 30 '22 19:04 thetruth1984

Hey thanks for reporting this, I downloaded the installers again and ran them through windows defender and it thinks they are fine. Did you have to run the installer for it to get detected???

PHARTGAMES avatar May 23 '22 03:05 PHARTGAMES

Mine detected bladabindi trojan as well - my corporate malware system blocked it and detected it right after installation.

dreycos avatar Aug 28 '22 00:08 dreycos

Is it a false positive or did someone put the browser key logging / cache malware within the project?

dreycos avatar Aug 28 '22 00:08 dreycos

You do have to run the installer for it to get detected I believe.

dreycos avatar Aug 28 '22 00:08 dreycos

When launching the spacemonkeyTP.exe it also triggers the Bladabindi trojan detections.

dreycos avatar Aug 28 '22 03:08 dreycos

I looked closer at this, and Windows Defender thinks that it contains Bladabindi because SharpMonoInjector.dll is in the project, really weird that it didn't detect it when I checked on 23rd may..

I rebuilt the SharpMonoInjector.dll and windows no longer thinks it's bladabindi.. That dll was compiled by me originally... I really hope it's a false positive. I'll take down the current release and do a new one asap.

Thanks all

PHARTGAMES avatar Aug 28 '22 11:08 PHARTGAMES

I have updated the installer with a new version that Windows Defender is happy with.

PHARTGAMES avatar Aug 28 '22 11:08 PHARTGAMES

Thanks - I'll give it another test this evening.

dreycos avatar Aug 29 '22 13:08 dreycos

Is this link on git the proper 'latest' fixed .msi?

Installation The latest installer for SpaceMonkey is here (v1.0.5)

https://github.com/PHARTGAMES/SpaceMonkey/raw/main/GenericTelemetryProvider/Installer/SpaceMonkeyTP-SetupFiles/SpaceMonkeyTP.msi

Install anywhere to your local drive.

dreycos avatar Aug 29 '22 14:08 dreycos

Is this link on git the proper 'latest' fixed .msi?

Installation The latest installer for SpaceMonkey is here (v1.0.5)

https://github.com/PHARTGAMES/SpaceMonkey/raw/main/GenericTelemetryProvider/Installer/SpaceMonkeyTP-SetupFiles/SpaceMonkeyTP.msi

Install anywhere to your local drive.

Yes that is latest, I didn't update the version number :)

Hopefully soon I'll get back in to SpaceMonkey there's a few new games I want to make providers for but atm i'm stuck rig building.

PHARTGAMES avatar Aug 30 '22 10:08 PHARTGAMES

Great - thanks for updating the package.

dreycos avatar Aug 30 '22 13:08 dreycos