PKHeX Wacatac.H!ml virus

[badblood08]

I tried downloading the latest PKHeX from here: https://projectpokemon.org/home/files/file/1-pkhex/

Windows Security got this virus:

Is this a false positive virus? Should I disregard this. Please advise.

Thanks!

 

[SylverReZ]

I tried downloading the latest PKHeX from here: https://projectpokemon.org/home/files/file/1-pkhex/

Windows Security got this virus:
View attachment 341144
View attachment 341143

Is this a false positive virus? Should I disregard this. Please advise.

Thanks!

Pop the file into VirusTotal or Hybrid-Analysis and it'll tell you whether if this is the case or not. Microsoft Defender generates tons of false positives, so you shouldn't worry about anything.

 

[binkinator]

I tried downloading the latest PKHeX from here: https://projectpokemon.org/home/files/file/1-pkhex/

Windows Security got this virus:
View attachment 341144
View attachment 341143

Is this a false positive virus? Should I disregard this. Please advise.

Thanks!

https://www.virustotal.com/gui/file/138b757ebd8fb9140df3324da79f1e67477e404dfa34c4a2aa2d4609c0fc2431

E: @M4x1mumReZ oops…was busy scanning the damn thing myself…didn’t see your answer in time.

 

[badblood08]

Pop the file into VirusTotal or Hybrid-Analysis and it'll tell you whether if this is the case or not. Microsoft Defender generates tons of false positives, so you shouldn't worry about anything.

Only 1 vendor found it as a virus

I'm not sure if this is an isolated case that can be disregarded

 

[binkinator]

Only 1 vendor found it as a virus
View attachment 341145
I'm not sure if this is an isolated case that can be disregarded

You have to decide that for yourself. BTW, you are scanning their website and not the actual file.

 

[badblood08]

I'm totally going to trust my guts here, and download this anyway. I better have some god damn luck XD

 

[linuxares]

https://github.com/kwsch/PKHeX/releases/tag/22.12.01 - here if you wanna built it yourself

 

[Hayato213]

I'm totally going to trust my guts here, and download this anyway. I better have some god damn luck XD

You need better AV if you are using Microsoft Defender.

 

[hippy dave]

Probably best to stop playing any Pokémon games forever just to be safe.

 

[halfashark]

no matter what i scan virustotal always has at least 1-2 vendors mark it as a false positive. i've uploaded empty archives, blank raw text documents and random images and photos and there's always at least one.

i would be more concerned if several caught it. additionally if you google the name of said malware you'll see that every single post and thread mentions it being an extremely common false positive. windows defender seems to mark benign python and c++ scripts as being infected with this quite frequently.

you're probably fine but if you're ever super paranoid maybe consider putting a linux distro on a flash drive and performing your mods on that. it wouldn't 100% protect you unless you also physically disconnected any other mountable media but it would certainly add a layer of protection and teach you some new skills.

 

[linuxares]

no matter what i scan virustotal always has at least 1-2 vendors mark it as a false positive. i've uploaded empty archives, blank raw text documents and random images and photos and there's always at least one.

i would be more concerned if several caught it. additionally if you google the name of said malware you'll see that every single post and thread mentions it being an extremely common false positive. windows defender seems to mark benign python and c++ scripts as being infected with this quite frequently.

you're probably fine but if you're ever super paranoid maybe consider putting a linux distro on a flash drive and performing your mods on that. it wouldn't 100% protect you unless you also physically disconnected any other mountable media but it would certainly add a layer of protection and teach you some new skills.

PKhex doesn't work really well with Mono according to PKhex themselves.

 

[halfashark]

PKhex doesn't work really well with Mono according to PKhex themselves.

Oh, wild. Windows only. How bizzare... guess it's due to their choice of language. (C#).

That's... actually really lame. Guess the 2nd best would just be a windows virtual machine with stuff like PAE/NX and shared clipboards/drag and drops disabled. That said it's most definitely a false positive but for those who are worried it's at least a way to accommodate for their concerns.

Still. Dang.

 

[Hayato213]

Probably best to stop playing any Pokémon games forever just to be safe.

hand hippy dave a voltorb and run.

 

[W0rmy]

You need better AV if you are using Microsoft Defender.

No you don’t. You need common sense. Defender has been fine for ages and alerting him fine. As someone has said it’s alerting on that URL.

Common sense would be to find a more reputable download link.

 

[The Real Jdbye]

Only 1 vendor found it as a virus
View attachment 341145
I'm not sure if this is an isolated case that can be disregarded

Probably. Even the 1 detection is vague/heuristics and not a real detection.
It appears it's scanning the URL as a website though, rather than scanning the file. You'd get better results if you downloaded the file and manually uploaded it.

 

[Hayato213]

No you don’t. You need common sense. Defender has been fine for ages and alerting him fine. As someone has said it’s alerting on that URL.

Common sense would be to find a more reputable download link.

There is no problem downloading it from projectpokemon.org, I been downloading pkhex from there for years and no issues. Just that he got a false detection.

 

[godreborn]

https://github.com/kwsch/PKHeX/releases/tag/22.12.01 - here if you wanna built it yourself

I doubt this will be any better, but I compiled this one, kinda weird.

https://anonfiles.com/m2f4I5Key7/net6.0-windows_zip

 

[XVicarious]

PKhex doesn't work really well with Mono according to PKhex themselves.

It works nearly perfectly with Mono. They're "upgrading" to Net 6.0 and leaving Mac and Linux in the dust.

 

[linuxares]

It works nearly perfectly with Mono. They're "upgrading" to Net 6.0 and leaving Mac and Linux in the dust.

*sad faces*

 

[XVicarious]

See here

I tried myself, but I didn't have the patience to make heads or tails of it. A lot of duplicate implementations seem to exist in the source itself. Maybe I'll try again later.