snoretoast-x86.exe detected as a trojan by McAfee Endpoint Security

[chernobog]

Whether or not snoretoast-x86.exe is malware, this creates a poor user experience, and compromises trust with this repo.

McAfee ENS detects the following file as a trojan (RDN/Generic.dx):
%userprofile%\AppData\Local\Temp\nsoBF47.tmp\7z-out\resources\app.asar.unpacked\node_modules\note-notifier\vendor\snore\snoretoast-x86.exe

[ve3]

YouTube-Music-1.18.0.exe Also detected in Virus total website scanned by Trend micro ( https://www.virustotal.com/gui/file/f64aa95b6778a61cf9e50f6f4b8d28fc64fe08980c4ded44b48f8a0420e6622f?nocache=1 )
TROJ_GEN.R002H06IR22

[th-ch]

Hey folks, that seems weird indeed 🤔 Snoretoast is compiled from source in the repo (also applying a missing patch along the way) and nothing was changed recently in that area, not sure why some antiviruses suddenly detect it (false positive?) - if you prefer, you can compile it yourself by setting up the repo (cloning and install dependencies with yarn) then building snoretoast (see the linked CI file for instructions - it consists in cloning the repo, applying the patch then compiling it), then building the app (yarn build:win) - hope that helps!

[Araxeus]

@th-ch seems like some changes were made and a new snoretoast version was released

KDE/snoretoast@8502ef0
https://invent.kde.org/libraries/snoretoast/-/commit/8502ef06167b3741c072cf65ba74d4f501600408

(this is pretty much what the local patch does)

https://binary-factory.kde.org/job/SnoreToast_Release_win64/
https://binary-factory.kde.org/job/SnoreToast_Nightly_win64/

might work with the signed file now, need some testing (I cannot test it sadly)

I've also posted in node-notifier (mikaelbr/node-notifier#375 (comment))
Might be better to wait for them to update

[chernobog]

Reinstalled today, and McAfee did not protest.

[Araxeus]

New snoretoast version was officialy released

https://download.kde.org/stable/snoretoast/0.9.0/

release notes

edit: the new version didn't actually fix the bug