Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
Tags
(+2)

is it normal when winows defenders find trojans and other threats when installing this?

Yes, this is a false warning and can be dismissed. Registering the program (so this false warning disappears) would sadly cost a lot of money. :/

The starter is open source, so if there was a virus included, people could easily find out. Source code: https://github.com/GothaB/invokeai_starter

(2 edits)

Hey! I tried installing it on itch.io, but it clearly seems within the files installing was as trojan called Blababindi... I did some research, it's pretty dangerous, and I wonder how it could have gotten inside these files... Fortunately Windows Defender quarantined it, but still... Would you have an explanation (no it's not a bug there was indeed Blababindi!ml inside of it)


To be exact here's the address from the itch folder in %appdata% : "itch\apps\invokeai\invokeai_2_3_0_standalone\invokeai\models\hub\models--CIDAS--clipseg-rd64-refined\snapshots\583b388deb98a04feb3e1f816dcdb8f3062ee205\pytorch_model.bin"


And the Defender patch note : Backdoor:Win32/Bladabindi!ml threat description - Microsoft Security Intelligence

Most likely a mistake of Windows Defender. If you upload the file to virustotal, no other virus scanner detects it as a virus: https://www.virustotal.com/gui/file/dd9308225b8314bb7236f207e6ea72b22db5d90dba03...

I'll check how to contact Microsoft to figure that out.

good luck, when i made something on visual studio i contacted Microsoft and they got it rid in the next security intelligence update

(1 edit)

Hmmh ... Maybe.... I don't doubt your honesty, since it's all open source, but scary stuff though, I think I'll install it on a VM. Just to be sure. And not from itch.io

(+1)

This is being discussed on Github too. Different detection in a different release of pytorch_model.bin, but same problem.