Just Enough Items (JEI)

Just Enough Items (JEI)

386M Downloads

[Other]: flagged as trojan

Flyingwagons opened this issue ยท 16 comments

commented

Other

Whenever I download any version of 1.21 JEI my computer antivirus flags it as a trojan. I do not know if this is a problem with the mod or my computer, but my computer was fine with every other mod and every other version 1.20.6 and below. I did not know if this qualified as a bug as this not affect the game itself.

commented

Same for me, it says that there is a virus that is executing command so i delted it just in case.

commented

Version 15.8.0.16 for Fabric 1.20.1 had this issue for me as well.

commented

Hmm thanks for letting me know. This is probably a false positive, JEI is open source and the CI builds from the source.
I'll compare 15.8.0.16 for Fabric 1.20.1 to the source code to verify that nothing has been compromised.

commented

The jar from CurseForge is identical to the jar I can build from source, so this is just a false positive.

commented

The jar from CurseForge is identical to the jar I can build from source, so this is just a false positive.

And for fabric 1.21?

commented

Version 15.8.0.16 for Fabric 1.20.1 had this issue for me as well.

Forge Version of that one as well.

commented

Which antivirus is flagging things? I can try to submit an appeal to them.

commented

Which antivirus is flagging things? I can try to submit an appeal to them.

Windows 11 anti-virus / microsoft defender

commented

Which antivirus is flagging things? I can try to submit an appeal to them.

Flagged by Windows 10's built-in Virus & threat protection / Microsoft Defender Antivirus

image

commented

I really don't know why they're flagging it.
See the VirusTotal results here: https://www.virustotal.com/gui/file/e47d5172bdad9c74bd902c37518c98eececdaf0e69a0fa75c21c55e6b797a401

Screenshot 2024-07-22 at 11 13 53โ€ฏAM

commented

I will follow Microsoft's submission process here: https://www.microsoft.com/en-us/wdsi/filesubmission/
It looks like the only way to appeal is to make them manually analyze it, may take a while.

commented

Seems some other mods are having a similar issue. I haven't been able to download the Collective mod from any source I have tried.

commented

I haven't received any updates from Microsoft.
I assume if enough people submit these files to them, they will eventually take action.
If you have time, please submit one of these many jar files to microsoft.com/en-us/wdsi/filesubmission so they can analyze it and fix their detection methods.

commented

Ok thanks, I'm glad that's over.

commented

I still haven't received any updates from Microsoft, the case is pending.

commented

Seems Windows Defender isn't flagging JEI or any of the other mods as a virus, like it was doing before.