Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows reported Trojan:Win32/Malgent!MTB on .exe version 0.5.0 #387

Open
gilsonwindsoft opened this issue Sep 4, 2024 · 5 comments
Open
Labels
bug Something isn't working

Comments

@gilsonwindsoft
Copy link

Windows antivirus was reported Trojan:Win32/Malgent!MTB in .exe version 0.5.0
Version 0.4.8 don't report any problem

@gilsonwindsoft gilsonwindsoft added the bug Something isn't working label Sep 4, 2024
@SantiiRepair
Copy link

PS C:\Users\SantiiRepair\Documents\GitHub\ratconn> scoop install rathole 
Installing 'rathole' (0.5.0) [64bit] from 'main' bucket
rathole-x86_64-pc-windows-msvc.zip (1.6 MB) [================================================================================================================] 100%
Checking hash of rathole-x86_64-pc-windows-msvc.zip ... Get-FileHash : The file 'C:\Users\SantiiRepair\scoop\apps\rathole\0.5.0\rathole-x86_64-pc-windows-msvc.zip' cannot be read: Operation did not complete
successfully because the file contains a virus or potentially unwanted software.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\install.ps1:634 char:16
+     $actual = (Get-FileHash -Path $file -Algorithm $algorithm).Hash.T ...
+                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ReadError: (C:\Users\Santii...indows-msvc.zip:PSObject) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : FileReadError,Get-FileHash

You cannot call a method on a null-valued expression.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\install.ps1:634 char:5
+     $actual = (Get-FileHash -Path $file -Algorithm $algorithm).Hash.T ...
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [], RuntimeException
    + FullyQualifiedErrorId : InvokeMethodOnNull

Get-Content : Operation did not complete successfully because the file contains a virus or potentially unwanted software.
At C:\Users\SantiiRepair\scoop\apps\scoop\current\lib\core.ps1:1379 char:16
+         return Get-Content $file -Encoding byte -TotalCount 8
+                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ReadError: (C:\Users\Santii...indows-msvc.zip:String) [Get-Content], IOException
    + FullyQualifiedErrorId : GetContentReaderIOError,Microsoft.PowerShell.Commands.GetContentCommand

ERROR Hash check failed!
App:         main/rathole
URL:         https://github.com/rapiz1/rathole/releases/download/v0.5.0/rathole-x86_64-pc-windows-msvc.zip
First bytes:
Expected:    2f3b4900a63d32a14e1578b2de68f78daad89b7c47b9388c26d922962faef430
Actual:

Please try again or create a new issue by using the following link and paste your console output:
https://github.com/ScoopInstaller/Main/issues/new?title=rathole%400.5.0%3a+hash+check+failed

@Snowbelldog
Copy link

I think a virus has used this project to tunnel the local network data... windows has now blocked the signature from the virus and thus also this project

would this make sense?

@distributev
Copy link

don't know if it makes sense or not.

I tried both to download from github and install via scoop in both situations windows rejected the install with the Sever virus.

Who would take the risk now?

@SantiiRepair
Copy link

don't know if it makes sense or not.

I tried both to download from github and install via scoop in both situations windows rejected the install with the Sever virus.

Who would take the risk now?

Me

@distributev
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants