Virus

[ezzpify]

Virus

[Ezzpify]

Can you scan the individual files and tell me which ones your anti-virtus considers a virus?
As always, the good thing about Open Source programs is that you can download the source and compile it yourself.

[rahiem2000]

It is only the exe one. Do you have a tutorial of how to compile it maybe im not so smart :(.

[Ezzpify]

Can you give me the logs the anti-virtus gives you about the file?
If you want to compile it yourself you need an IDE, I would recommend Visual Studio.

[rahiem2000]

Yeah I have visual studio. How can I see the logs?

[rahiem2000]

Im using widnwos defender btw

[Ezzpify]

So it just says "it's a virtus"? Can you give me a screenshot?

[rahiem2000]

Yeah its like trojan detected cant see logs dont have the file either.

[Ezzpify]

Can you give me a screenshot of what Windows Defender says about the file?

[rahiem2000]

It says nothing anymore because I dont have the file anymore.

[rahiem2000]

But can you explain how to compile it? been using this program so long but now my av says its a virus

[Ezzpify]

Download the source, then open the .sln in Visual Studio.
Can you download the file again, open it, then screenshot whatever your Anti-Virus says?

[rahiem2000]

This is really weird now i dont get a popup :O.

[rahiem2000]

I opened the sln what do I need to do now?

[Ezzpify]

Weird that you didn't get the pop-up a second time.
Should it happen again, please take a screenshot of it.

At the top you go Build -> Build Solution

[rahiem2000]

Did that

[Ezzpify]

You'll be able to find the HourBoostr.exe in bin folder
Do the same for Settings.exe project if you want that

[0Ky]

VirusTotal Scan

VirusScanJotti

This is with the latest build v1.9.1:
MD5: 8BB63AE96415E486706D2A7CED74B288

[rahiem2000]

^

[0Ky]

VxStream Sandbox Automated File Analysis
(Verdict: malicious; Label: Gen:Variant.MSILPerseus; TS: 29/100; AV: 16%):
https://www.hybrid-analysis.com/sample/55443fb1dd5e313fa4735f53d40ec9e1671667c2731c42907c17c0ff4336f661?environmentId=100

[Ezzpify]

I'm not entirely sure what's triggering this..
I've gotten more reports of people adding me and telling me that it gets automatically removed.
I'll try and look into the updates I made and see what triggers it exactly... Very annoying.

For now, people who are worried about a virus, download the source, go through it, make sure there is no malicious code anywhere, then compile it yourself and run it, :)

[Ezzpify]

I've uploaded the version I am working on right now. It's not fully complete or tested, but please check if this version also triggers your anti-virus.

[Ezzpify]

I built the new version against framwork v4.6.1 again instead of v4.5.1
No idea if that helps.

I also removed some redundant code from SteamWeb.cs since it is used in SteamTrade.dll from SteamBot (by Jessecar96) which has been used in the past to steal items, thus flagging SteamTrade.dll as a virus.
I have only been using a very small part of that library's code, but I removed even more now just to be certain.

If anyone is still experiencing issues, please let me know.

[Ezzpify]

Closing this as I have not gotten any reports about the new version having any problems with anti-virus.
Seems like the target framework might have caused it somehow ??

[0Ky]

Interestingly what ever changes you made just made it more detectable. It's detecting it as a Trojan

[Ezzpify]

Re-opening issue since it still seems to be a problem