EssentialCosmeticsUnlocker icon indicating copy to clipboard operation
EssentialCosmeticsUnlocker copied to clipboard

ECU is flagged by VirusTotal

Open IAmSomeoneLol opened this issue 1 year ago • 4 comments

i found a comment on reddit about this mod and decided to give it a try, though I am always sceptical about mods and check them for viruses, so when I went to VirusTotal and uploaded it, there were 2 detections, from Google and Ikarus "Exploit.JAVA.Banload". I didn't run the mod for that reason so now I'm wondering if this is like an Issue or true.. image

IAmSomeoneLol avatar Jul 08 '24 17:07 IAmSomeoneLol

Why open this kind of issue on Github? There is nothing I can do to solve this. If, with your judgment, you think you should not use this, then do not.

dxxxxy avatar Jul 08 '24 18:07 dxxxxy

Why open this kind of issue on Github? There is nothing I can do to solve this. If, with your judgment, you think you should not use this, then do not.

I mean no offense here, but when it comes to Viruses it's a big thing for me personally. I was just wondering if this was a Known thing cause I hadn't seen it mentioned anywhere on the Description.

IAmSomeoneLol avatar Jul 09 '24 16:07 IAmSomeoneLol

Virus Detection this days is moving away from a standalone "I detect a virus by it's signature" approach because there are to many methods into bypassing this. Modern solutions will try for more dynamic scans that will try to evaluate a software through heuristic. Think of it as "when it behaves like known malware, it will probably be malware".

ECU does things that are rather unusual for a Minecraft Modification in order to interact with Essential. It does share a lot of things with malware in this regards which makes it so that a handful of false detections through Antivirus software is to be expected. Definitely not worthy a Github issue however. Not a lot the developer can do other than trying to add evasion methods that in itself might as well trigger differently antivirus heuristic detections. A game of Whack-A-Mole that would go on forever.

PureFallen avatar Jul 16 '24 16:07 PureFallen

I can confirm it is safe to use. Enjoy.

nscwb avatar Aug 02 '24 06:08 nscwb