overwolf / jar-infection-scanner Goto Github PK

View Code? Open in Web Editor NEW

116.0 116.0 13.0 37 KB

Scan jar files for known infections

License: MIT License

C# 100.00%

jar-infection-scanner's People

Contributors

Stargazers

Watchers

Forkers

coehlrich jawnmower eshbith mariocakedev ftingle dancervlt69 thesaintoffourtysinners-spec mrmewtwo2009 lwd-temp undeadk1ng umineko1993 bluscream cyberflamego

jar-infection-scanner's Issues

How to perform the scan in secure way?

Given that the root cause of the problem was downloading software from untrusted source, I am not sure I want to fix it by downloading an app from github.
I know it's open source, but I am not .Net expert and to me it looks like quite a lot of code and xmls to review for any potential threat.
Thus I wonder:

Isn't there a simpler way to scan for strings, by using existing, trusted tools, like xargs jar grep, which would be much easier to review for wider audience?
If I really have to run your app, can I at least "sandbox" it somehow, by restring access to files to just read-only and blocking network? If so, what are the simplest, most robust ways, to do that on Windows?

Access denied attempting to index any directory, no matter if running in administrator mode

Error message when running scanner

Whenever I run the program's exe file, I get this message, and I don't know what it means. If I press continue, when I try to select folders to scan, it won't let me select them. Just opens the folder

Edit: I cannot even open the select folder view. its just the message that shows

Compability with Linux

Hello! So I want to use this scanner on my Linux Mint 21.1 computer. I tried running the program with Wine, but it gives off this error:

Unhandled Exception:
System.ArgumentException: The requested FontFamily could not be found [GDI+ status: FontFamilyNotFound]
  at System.Drawing.GDIPlus.CheckStatus (System.Drawing.Status status) [0x001ce] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.FontFamily..ctor (System.Drawing.Text.GenericFontFamilies genericFamily) [0x0004d] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at (wrapper remoting-invoke-with-check) System.Drawing.FontFamily..ctor(System.Drawing.Text.GenericFontFamilies)
  at System.Drawing.FontFamily.get_GenericSansSerif () [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font.CreateFont (System.String familyName, System.Single emSize, System.Drawing.FontStyle style, System.Drawing.GraphicsUnit unit, System.Byte charSet, System.Boolean isVertical) [0x00011] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font..ctor (System.String familyName, System.Single emSize, System.Drawing.FontStyle style, System.Drawing.GraphicsUnit unit, System.Byte gdiCharSet, System.Boolean gdiVerticalFont) [0x00011] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font..ctor (System.String familyName, System.Single emSize, System.String systemName) [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at (wrapper remoting-invoke-with-check) System.Drawing.Font..ctor(string,single,string)
  at System.Drawing.SystemFonts.get_DefaultFont () [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Windows.Forms.Control.get_DefaultFont () [0x0000e] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control.get_Font () [0x00088] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control.get_FontHeight () [0x000a9] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase.get_PreferredHeight () [0x00001] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase.get_DefaultSize () [0x00001] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control..ctor (System.Boolean autoInstallSyncContext) [0x000e3] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control..ctor () [0x00000] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase..ctor () [0x0003a] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBox..ctor () [0x0004a] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at (wrapper remoting-invoke-with-check) System.Windows.Forms.TextBox..ctor()
  at JarInfectionScanner.Form1.InitializeComponent () [0x00016] in <30c8316a67b642a994f453a2ba918268>:0 
  at JarInfectionScanner.Form1..ctor () [0x00006] in <30c8316a67b642a994f453a2ba918268>:0 
  at (wrapper remoting-invoke-with-check) JarInfectionScanner.Form1..ctor()
  at JarInfectionScanner.Program.Main () [0x0000b] in <30c8316a67b642a994f453a2ba918268>:0 
[ERROR] FATAL UNHANDLED EXCEPTION: System.ArgumentException: The requested FontFamily could not be found [GDI+ status: FontFamilyNotFound]
  at System.Drawing.GDIPlus.CheckStatus (System.Drawing.Status status) [0x001ce] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.FontFamily..ctor (System.Drawing.Text.GenericFontFamilies genericFamily) [0x0004d] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at (wrapper remoting-invoke-with-check) System.Drawing.FontFamily..ctor(System.Drawing.Text.GenericFontFamilies)
  at System.Drawing.FontFamily.get_GenericSansSerif () [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font.CreateFont (System.String familyName, System.Single emSize, System.Drawing.FontStyle style, System.Drawing.GraphicsUnit unit, System.Byte charSet, System.Boolean isVertical) [0x00011] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font..ctor (System.String familyName, System.Single emSize, System.Drawing.FontStyle style, System.Drawing.GraphicsUnit unit, System.Byte gdiCharSet, System.Boolean gdiVerticalFont) [0x00011] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Drawing.Font..ctor (System.String familyName, System.Single emSize, System.String systemName) [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at (wrapper remoting-invoke-with-check) System.Drawing.Font..ctor(string,single,string)
  at System.Drawing.SystemFonts.get_DefaultFont () [0x00000] in <bfbb50e127a74386baaf6a1ce3e1493f>:0 
  at System.Windows.Forms.Control.get_DefaultFont () [0x0000e] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control.get_Font () [0x00088] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control.get_FontHeight () [0x000a9] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase.get_PreferredHeight () [0x00001] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase.get_DefaultSize () [0x00001] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control..ctor (System.Boolean autoInstallSyncContext) [0x000e3] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.Control..ctor () [0x00000] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBoxBase..ctor () [0x0003a] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at System.Windows.Forms.TextBox..ctor () [0x0004a] in <5ea26500d4d340168c8a375e356ca0ac>:0 
  at (wrapper remoting-invoke-with-check) System.Windows.Forms.TextBox..ctor()
  at JarInfectionScanner.Form1.InitializeComponent () [0x00016] in <30c8316a67b642a994f453a2ba918268>:0 
  at JarInfectionScanner.Form1..ctor () [0x00006] in <30c8316a67b642a994f453a2ba918268>:0 
  at (wrapper remoting-invoke-with-check) JarInfectionScanner.Form1..ctor()

Can you do something about it? Or perhaps there's a problem on my side? Thanks.

Download gets caught by Windows Defender as a Trojan

I'd assume its not suppose to do this

this is when you click on the link specifically https://github.com/overwolf/jar-infection-scanner/releases/download/1.0.1/jar-infection-scanner.zip from https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool/

windows defender then removes it shortly after, I did extract it one time, but the browse button did not work

EDIT: just to clarify, I am assuming this is a false positive, but might want to be checked.

There is a problem with the button layout

After entering the program, the button to select the folder path does not display properly.
The screen resolution is 1366*768
No matter how much you enlarge or resize the window, it will not solve the problem

Unable to select folders

Upon selecting a folder, it just goes "into" that folder instead of selecting and working with it. It's not a proper folder selector like other programs have it, it's kind of weird

minor bug: "folder/file" field doesn't accept quoted strings

if I have quotes in the path, like when I choose "copy path" for a folder on Windows Explorer, I get this if I forget to remove the quotes:

System.ArgumentException: Illegal characters in path.
   at System.IO.LongPathHelper.Normalize(String path, UInt32 maxPathLength, Boolean checkInvalidCharacters, Boolean expandShortPaths)
   at System.IO.Path.NewNormalizePath(String path, Int32 maxPathLength, Boolean expandShortPaths)
   at System.IO.Path.NormalizePath(String path, Boolean fullCheck, Int32 maxPathLength, Boolean expandShortPaths)
   at System.IO.Path.GetFullPathInternal(String path)
   at System.IO.FileSystemEnumerableIterator`1..ctor(String path, String originalUserPath, String searchPattern, SearchOption searchOption, SearchResultHandler`1 resultHandler, Boolean checkHost)
   at System.IO.Directory.GetFiles(String path, String searchPattern, SearchOption searchOption)
   at JarInfectionScanner.Form1.<>c__DisplayClass3_0.<buttonScan_Click>b__0()
   at System.Threading.Tasks.Task.InnerInvoke()
   at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at JarInfectionScanner.Form1.<buttonScan_Click>d__3.MoveNext()

obviously it is quite minor, but it's probably also quite easy to fix.

Windows detects as trojan

Error when trying to browse

I'm not sure what any of this info means, and I couldn't find any kind of tutorial for the scanner anywhere.

I was also told to add info from the details dropdown (I couldn't get a picture because the error window doesn't expand):

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.IO.FileNotFoundException: Could not load file or assembly 'Microsoft.WindowsAPICodePack.Shell, Version=1.1.0.0, Culture=neutral, PublicKeyToken=null' or one of its dependencies. The system cannot find the file specified.
File name: 'Microsoft.WindowsAPICodePack.Shell, Version=1.1.0.0, Culture=neutral, PublicKeyToken=null'
at JarInfectionScanner.Form1.buttonBrowse_Click(Object sender, EventArgs e)
at System.Windows.Forms.Control.OnClick(EventArgs e)
at System.Windows.Forms.Button.OnClick(EventArgs e)
at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent)
at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.ButtonBase.WndProc(Message& m)
at System.Windows.Forms.Button.WndProc(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

WRN: Assembly binding logging is turned OFF.
To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1.
Note: There is some performance penalty associated with assembly bind failure logging.
To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].

Loaded Assemblies
mscorlib
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B
CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll

JarInfectionScanner
Assembly Version: 1.0.1.0
Win32 Version: 1.0.1.0
CodeBase: file:///C:/Users/nyxed/AppData/Local/Temp/7zO07DA8A17/JarInfectionScanner.exe

System.Windows.Forms
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9075.0 built by: NET481REL1LAST_C
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

System
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll

System.Drawing
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9032.0 built by: NET481REL1
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

System.Configuration
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9032.0 built by: NET481REL1
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

System.Core
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll

System.Xml
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9032.0 built by: NET481REL1
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll

Accessibility
Assembly Version: 4.0.0.0
Win32 Version: 4.8.9032.0 built by: NET481REL1
CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/Accessibility/v4.0_4.0.0.0__b03f5f7f11d50a3a/Accessibility.dll

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

System.UnauthorizedAccessException: Access to the path 'C:\Documents and Settings' is denied.

Please make it possible to scan the entire disk such as C:\ because right now it gets stuck on accessing protected folders, can you just make it skip those folders?

overwolf / jar-infection-scanner Goto Github PK

jar-infection-scanner's People

Contributors

Stargazers

Watchers

Forkers

jar-infection-scanner's Issues

************** Loaded Assemblies ************** mscorlib Assembly Version: 4.0.0.0 Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll

JarInfectionScanner Assembly Version: 1.0.1.0 Win32 Version: 1.0.1.0 CodeBase: file:///C:/Users/nyxed/AppData/Local/Temp/7zO07DA8A17/JarInfectionScanner.exe

System.Windows.Forms Assembly Version: 4.0.0.0 Win32 Version: 4.8.9075.0 built by: NET481REL1LAST_C CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

System Assembly Version: 4.0.0.0 Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll

System.Drawing Assembly Version: 4.0.0.0 Win32 Version: 4.8.9032.0 built by: NET481REL1 CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

System.Configuration Assembly Version: 4.0.0.0 Win32 Version: 4.8.9032.0 built by: NET481REL1 CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

System.Core Assembly Version: 4.0.0.0 Win32 Version: 4.8.9139.0 built by: NET481REL1LAST_B CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll

System.Xml Assembly Version: 4.0.0.0 Win32 Version: 4.8.9032.0 built by: NET481REL1 CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll

Accessibility Assembly Version: 4.0.0.0 Win32 Version: 4.8.9032.0 built by: NET481REL1 CodeBase: file:///C:/WINDOWS/Microsoft.Net/assembly/GAC_MSIL/Accessibility/v4.0_4.0.0.0__b03f5f7f11d50a3a/Accessibility.dll

Recommend Projects

Recommend Topics

Recommend Org