Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

55319 readers

395 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others

Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

💰 Please help cover server costs.


Ko-fi	Liberapay

founded 2 years ago

MODERATORS

db0@lemmy.dbzer0.com

sunbrothersco@lemmy.dbzer0.com

dataprolet@lemmy.dbzer0.com

Flatworm7591@lemmy.dbzer0.com

RandomLegend@lemmy.dbzer0.com

Malwarebytes "AI detection" giving false positive from pirated software? (lemmy.dbzer0.com)

submitted 6 hours ago by Sasori323@lemmy.dbzer0.com to c/piracy@lemmy.dbzer0.com

19 comments fedilink hide all child comments

Today I was trying to download Affinity Photo 2 from the websites listed on the megathread, as normally I do exactly that and everything goes just fine.

But when scanning the downloaded files. Windows Defender detected it as hacktool.win32.keygen and malwarebytes as Generic.Malware.AI.DDS.

In the case of Windows, I am guessing that it is not detecting a virus but the actual crack right? That's what that means as far as I'm aware. But what surprised me was malwarebytes, it has sometimes warned about cracks but it's not something it does often, and I don't recognize the detection code, but it seems to be using AI to detect malware now?

Is this something that is known to happen? Malwarebytes AI seems to be detecting cracks as malware... Or is this actually a virus?

I put it in quarantine just in case, but I am guessing this has to be false positives, as it happened with 2 different downloads from 2 different websites.

VirusTotal results also flagged it as "malware", but seems to be also detecting the crack. https://www.virustotal.com/gui/file/127540f7b3558a94f6e8a4ce9c695231e8715e20a17da4584d5df99035a79d49/detection

you are viewing a single comment's thread
view the rest of the comments

[–] Sasori323@lemmy.dbzer0.com 3 points 6 hours ago (1 children)

I'm aware of that, I don't feel like installing it honestly. I might look for other downloads later. I suspect it's just the crack because it detected the same from two different downloads on reputable websites on this community.

Honestly I think i should start using vm's to run pirated software, not games, I have never haved problems with those since I'm already pretty experienced when it comes to that, but software has always felt more awkward to install. A VM could help with these situations where I'm not really sure if it's just the crack or actually malware.

[–] schizo@forum.uncomfortable.business 6 points 6 hours ago (1 children)

Yeah, I don't let anything that has to be cracked out of an isolated VM until it's VERY clear that nothing untoward is going on.

QEMU has proven perfectly lovely for a base to use for testing questionable software, and I've got quite a lot of VMs sitting around for various things that ah, have been acquired.

[–] Sasori323@lemmy.dbzer0.com 3 points 6 hours ago (2 children)

Had never heard of QEMU, would you recommend it over the typical ones like Oracle's? I have also heard of VMWare but honestly I have never used it. I really don't know which one to try

[–] bruce965@lemmy.ml 1 points 18 minutes ago

On Windows: VirtualBox (free and easy to use, but still advanced/powerful) or HyperV (already included if you have Windows Pro).

On Linux: anything based on KVM, my personal favourite is virt-manager, but QEMU is also great.

I would stay away from VMware because the free version is quite limited, and the pro version is not free. The free alternatives are equally good or better, so no reason to use something paid imho.

[–] fuckwit_mcbumcrumble@lemmy.dbzer0.com 3 points 4 hours ago

Referring to it as “Oracles” brings a deep pain to me.