Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Windows reported Trojan:Win32/Malgent!MTB on .exe version 0.5.0 #387

Open
gilsonwindsoft opened this issue Sep 4, 2024 · 5 comments
Open
Labels
bug Something isn't working

Comments

@gilsonwindsoft
Copy link

Windows antivirus was reported Trojan:Win32/Malgent!MTB in .exe version 0.5.0
Version 0.4.8 don't report any problem

@gilsonwindsoft gilsonwindsoft added the bug Something isn't working label Sep 4, 2024
@SantiiRepair
Copy link

PS C:\Users\SantiiRepair\Documents\GitHub\ratconn> scoop install rathole 
Installing 'rathole' (0.5.0) [64bit] from 'main' bucket
rathole-x86_64-pc-windows-msvc.zip (1.6 MB) [================================================================================================================] 100%
Checking hash of rathole-x86_64-pc-windows-msvc.zip ... Get-FileHash : The file 'C:\Users\SantiiRepair\scoop\apps\rathole\0.5.0\rathole-x86_64-pc-windows-msvc.zip' cannot be read: Operation did not complete
successfully because the file contains a virus or potentially unwanted software.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\install.ps1:634 char:16
+     $actual = (Get-FileHash -Path $file -Algorithm $algorithm).Hash.T ...
+                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ReadError: (C:\Users\Santii...indows-msvc.zip:PSObject) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : FileReadError,Get-FileHash

You cannot call a method on a null-valued expression.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\install.ps1:634 char:5
+     $actual = (Get-FileHash -Path $file -Algorithm $algorithm).Hash.T ...
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : InvokeMethodOnNull

Get-Content : Operation did not complete successfully because the file contains a virus or potentially unwanted software.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\core.ps1:1379 char:16
+         return Get-Content $file -Encoding byte -TotalCount 8
+                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ReadError: (C:\Users\Santii...indows-msvc.zip:String) [Get-Content], IOException
    + FullyQualifiedErrorId : GetContentReaderIOError,Microsoft.PowerShell.Commands.GetContentCommand

ERROR Hash check failed!
App:         main/rathole
URL:         https://github.com/rapiz1/rathole/releases/download/v0.5.0/rathole-x86_64-pc-windows-msvc.zip
First bytes:
Expected:    2f3b4900a63d32a14e1578b2de68f78daad89b7c47b9388c26d922962faef430
Actual:

Please try again or create a new issue by using the following link and paste your console output:
https://github.com/ScoopInstaller/Main/issues/new?title=rathole%400.5.0%3a+hash+check+failed

@Snowbelldog
Copy link

I think a virus has used this project to tunnel the local network data... windows has now blocked the signature from the virus and thus also this project

would this make sense?

@distributev
Copy link

don't know if it makes sense or not.

I tried both to download from github and install via scoop in both situations windows rejected the install with the Sever virus.

Who would take the risk now?

@SantiiRepair
Copy link

don't know if it makes sense or not.

I tried both to download from github and install via scoop in both situations windows rejected the install with the Sever virus.

Who would take the risk now?

Me

@distributev
Copy link

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants