LiveBot icon indicating copy to clipboard operation
LiveBot copied to clipboard

Trojan.Heur!.02046823 virus detected in livebot.exe

Open RosannaHomarra opened this issue 2 years ago • 9 comments

edited - Trojan.Heur! virus detected in your livebot.exe

RosannaHomarra avatar Oct 01 '22 22:10 RosannaHomarra

First time on here but just scan the .exe in virus total ty, and run the .exe and then run Hitman Pro and scan for threats if you want further proof, hitman pro will detect and remove the threats so don't worry as well as with my short 20 minutes or so with this virues, I noticed nothing being tampered with, but there is something malicious in that .exe.

RosannaHomarra avatar Oct 01 '22 22:10 RosannaHomarra

HitmanPro 3 8 30 - Build 326 (64-bit) 10_1_2022 6_52_44 PM

RosannaHomarra avatar Oct 01 '22 23:10 RosannaHomarra

Those were the Trojans found in the screenshot above, they've been since removed after being immediately quarantined, and I am now clean. HitmanPro 3 8 30 - Build 326 (64-bit) 10_1_2022 7_01_10 PM

RosannaHomarra avatar Oct 01 '22 23:10 RosannaHomarra

Um okay one second let me test this with Kaspersky AV

Edit: Okay I don't see anything malicious in the latest release (1.1.5) at least, so here's the script I'm using to built executables

I'm using [email protected], you can build the source code from the commit released right before the 1.1.5 release to build your own.

You can also try downloading the source code again (in a virtual machine if you require) to run an antivirus against it again... it's possible you already have a virus on your computer and it's infected LiveBot.

#!/bin/bash

if [ -z $1 ]; then
	echo "Please enter a version number"
	exit 1
else
	echo "Packaging LiveBot version $1"
fi

clearCol='\e[0m'
msgCol='\e[1;34m'

echo -e "$(echo $msgCol)Moving the tokens file $clearCol"
mv ../LiveBot/json/logins.json /tmp/logins.json

echo -e "$(echo $msgCol)Packaging... $clearCol"
electron-packager ../LiveBot --platform=all --arch=x64 --app-version="$1" --executable-name=LiveBot --icon=../LiveBot/resources/icons/logo.ico --overwrite --out .

echo -e "$(echo $msgCol)Returning the tokens file"
mv /tmp/logins.json ../LiveBot/json/logins.json

echo -e "$(echo $msgCol)Removing mas $clearCol"
rm -rf livebot-mas-x64


# Archiving
echo -e "$(echo $msgCol)Archiving darwin $clearCol"
zip -rq livebot-darwin-x64.zip livebot-darwin-x64

echo -e "$(echo $msgCol)Archiving win32 $clearCol"
zip -rq livebot-win32-x64.zip livebot-win32-x64

echo -e "$(echo $msgCol)Archiving linux $clearCol"
tar -czf livebot-linux-x64.tar.gz livebot-linux-x64

SebOuellette avatar Oct 02 '22 00:10 SebOuellette

Which release are you testing on?

SebOuellette avatar Oct 02 '22 00:10 SebOuellette

Which release are you testing on?

livebot-win32-x64.zip

This is the one I used, as I said the only reason I checked on virus total was cause the application was acting odd. And I used a antivirus application and it detected the file that was detected in livebots .exe.

RosannaHomarra avatar Oct 02 '22 01:10 RosannaHomarra

not saying this is your fault, or anyone else, just thought I'd say something.

RosannaHomarra avatar Oct 02 '22 01:10 RosannaHomarra

Here's the virus total report, I also scanned the .exe with Microsoft's anti-virus but it detected nothing.
VirusTotal - File - 08569561243f8fa8e00202e0eba900c0a2fae25072cdad67299264d50d7672d6 10_1_2022 9_59_12 PM

RosannaHomarra avatar Oct 02 '22 02:10 RosannaHomarra

might be a false positive since it was only detected on one antivirus

Anthony2be avatar Oct 30 '22 04:10 Anthony2be