Garry's Mod

Garry's Mod

VRMod - Experimental Virtual Reality
andynik76 10. juli 2023 kl. 2:59
this addon is trojan
after module installation, my antivirus said that this is trojan, is ok??
< >
Viser 1-9 af 9 kommentarer
enricojunca 10. juli 2023 kl. 11:43 
ENGLISH:
Hello! It's not, I can even send you the complete script that I got by converting the file to txt
RUSSIAN:
Привет! Это не так, я даже могу выслать вам полный скрипт, который я получил, преобразовав файл в txt

@echo off
SETLOCAL EnableDelayedExpansion
title VRMod Module Installer

FOR /F "tokens=*" %%a in ('powershell -command $PSVersionTable.PSVersion.Major 2^>nul') do set powershell_version=%%a
if defined powershell_version if !powershell_version! geq 4 GOTO update
echo This script requires Windows PowerShell 4.0+ (included in Windows 8.1 and later)
pause & exit

:update
powershell -command [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest https://github.com/catsethecat/vrmod-module/raw/master/vrmod_installer.bat -Out vrmod_installer.bat

:prompt
cls
FOR /F "tokens=2* skip=2" %%a in ('reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Valve\Steam" /v "InstallPath" 2^>nul') do set steam_dir=%%b
FOR /F "tokens=2* skip=2" %%a in ('reg query "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Valve\Steam" /v "InstallPath" 2^>nul') do set steam_dir=%%b
if not defined steam_dir (
echo "Steam installation path not found"
pause
exit
)
if exist "%steam_dir%\steamapps\appmanifest_4000.acf" set "gmod_dir=%steam_dir%\steamapps\common\GarrysMod"
for /f "usebackq tokens=2 skip=4" %%A in ("%steam_dir%\steamapps\libraryfolders.vdf") do (
if exist "%%~A\steamapps\appmanifest_4000.acf" set "gmod_dir=%%~A\steamapps\common\GarrysMod"
)
if not defined gmod_dir (
echo "GMod installation path not found"
pause
exit
)

echo Game folder: %gmod_dir%
echo Make sure Garry's Mod is not running before proceeding.
echo.

echo Select an option:
echo 1) install / update
echo 2) uninstall
set /p choice="> "

cls
if %choice%==1 GOTO install
if %choice%==2 GOTO uninstall
echo Invalid option. Valid options are: 1, 2
pause
goto prompt

:install
pushd %gmod_dir%
echo Downloading VRMod repository...
powershell -command [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; Invoke-WebRequest https://github.com/catsethecat/vrmod-module/archive/master.zip -Out vrmod.zip

if not exist vrmod.zip (
echo "Download failed"
pause
exit
)

powershell -command "$testlol = Get-FileHash -a SHA1 vrmod.zip | Select-Object -expandproperty Hash | Out-String; echo ('vrmod.zip SHA1: ' + $testlol)"

echo Continue installation Y/N?
set /p choice="> "
if /I not %choice% == Y del vrmod.zip & exit
cls

echo Uncompressing...
powershell -command Expand-Archive vrmod.zip -Force
echo Installing...
xcopy /e /y /q vrmod\vrmod-module-master\install\GarrysMod "%gmod_dir%"
rmdir /s /q vrmod
del vrmod.zip
echo.
echo Done
echo.
pause
exit

:uninstall
echo Uninstalling...
del "%gmod_dir%\garrysmod\lua\bin\gmcl_vrmod_win32.dll"
del "%gmod_dir%\garrysmod\lua\bin\gmcl_vrmod_win64.dll"
del "%gmod_dir%\garrysmod\lua\bin\gmcl_vrmod_linux.dll"
del "%gmod_dir%\garrysmod\lua\bin\gmcl_vrmod_linux64.dll"
del "%gmod_dir%\garrysmod\lua\bin\update_vrmod.bat"
del "%gmod_dir%\bin\openvr_api.dll"
del "%gmod_dir%\bin\openvr_license"
del "%gmod_dir%\bin\libopenvr_api.so"
del "%gmod_dir%\bin\linux32\libopenvr_api.so"
del "%gmod_dir%\bin\linux64\libopenvr_api.so"
del "%gmod_dir%\bin\win64\openvr_api.dll"
del "%gmod_dir%\bin\win64\HTC_License"
del "%gmod_dir%\bin\win64\libHTC_License.dll"
del "%gmod_dir%\bin\win64\nanomsg.dll"
del "%gmod_dir%\bin\win64\SRanipal.dll"
del "%gmod_dir%\bin\win64\SRWorks_Log.dll"
del "%gmod_dir%\bin\win64\ViveSR_Client.dll"

echo Done
pause
SiEgE 11. juli 2023 kl. 23:48 
Oprindeligt skrevet af andynik76:
after module installation, my antivirus said that this is trojan, is ok??
If I say "yes, it is okay" and you just take it as granted, I'd gladly slap you on the back of your head with a shovel. You should not trust anyone just like that.

1. There are no viruses(at least when I've used it last time).
2. The found danger has probably come from the euristics module, which does not detect specific viruses, found in a virus database, but rather assume danger, based on what the file can do. Since even small things like downloading files off the internet can be considered dangerous, antiviruses are never shy of reporting it as a danger.
3. The file reported is probably the automatic installation script. You can avoid using the file you deem "infected" by just removing it and not using it. Just do things manually.
SiEgE 24. juli 2023 kl. 10:46 
Oprindeligt skrevet af Hello:
It is a trojan horse
Details, please.

The last time I've checked, in this thread( https://psteamcommunity.yuanyoumao.com/workshop/filedetails/discussion/1678408548/3371531159450557044/ ) it was known to be a mere heuristics warning.
PDM:Trojan.Win32.Generic.nblk - is a response from a heuristics module.
Sidst redigeret af SiEgE; 24. juli 2023 kl. 10:48
62 27. juli 2023 kl. 6:34 
Oprindeligt skrevet af Hello:
It is a trojan horse

Ok then don't have fun in gmod vr if you don't want to. Your choice
Sidst redigeret af 62; 27. juli 2023 kl. 6:35
taco 30. juli 2023 kl. 9:41 
Oprindeligt skrevet af 62:
Oprindeligt skrevet af Hello:
It is a trojan horse

Ok then don't have fun in gmod vr if you don't want to. Your choice
Ok
Tarrix 8. aug. 2023 kl. 14:25 
So, can I REALLY know if it's safe ? I mean, losing my computer to a vr mod would be kinda stupid. So, anyone let me know if it's safe or it has a virus
taco 8. aug. 2023 kl. 23:57 
Oprindeligt skrevet af Tarrix:
So, can I REALLY know if it's safe ? I mean, losing my computer to a vr mod would be kinda stupid. So, anyone let me know if it's safe or it has a virus
I rlly dont know anymore when i downloaded i could not shut down or restart my computer :steamsad:
SiEgE 9. aug. 2023 kl. 1:09 
Oprindeligt skrevet af Tarrix:
So, can I REALLY know if it's safe ? I mean, losing my computer to a vr mod would be kinda stupid. So, anyone let me know if it's safe or it has a virus
DLL file's code is available at the dev's github, so you can always analyze what is happening inside, and even build it on your own.
Addon's LUA scripts can be opened using Notepad and read.
Autoinstaller script can also be opened using Notepad and read.

If you cannot make sense of that information, then sorry, there is literally no way you can "REALLY" know if it is safe, except blind trust/gamble.
Sidst redigeret af SiEgE; 9. aug. 2023 kl. 1:20
dyce930 20. aug. 2023 kl. 10:48 
It's NOT a trojan. The module is okay to download, running it through virus total brought up nothing. If you STILL think it's a trojan, go play Roblox VR then.
Sidst redigeret af dyce930; 20. aug. 2023 kl. 10:48
< >
Viser 1-9 af 9 kommentarer
Per side: 1530 50