mirror of
https://github.com/quasar/Quasar.git
synced 2026-04-26 07:45:57 +03:00
[GH-ISSUE #1097] Will hosting this program on my computer put me at risk? #799
Labels
No labels
bug
bug
cant-reproduce
discussion
duplicate
easy
enhancement
help wanted
improvement
invalid
need more info
pull-request
question
wont-add
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/Quasar#799
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @tomjonesius on GitHub (Oct 5, 2022).
Original GitHub issue: https://github.com/quasar/Quasar/issues/1097
I downloaded the .zip file, extracted it to a folder, then moved it to my external hard drive. I then disconnected and did a virus scan, and three issues were found by BitDefender in locations nowhere near where I originally saved the files. Have I just inadvertently infected myself? I have removed the 'threats' and will leave my hard drive disconnected for the time being.
@edcdecl commented on GitHub (Oct 5, 2022):
which zip file.
@tomjonesius commented on GitHub (Oct 5, 2022):
The one found here (this repository)
https://github.com/quasar/Quasar/archive/refs/tags/v1.4.0.zip
@edcdecl commented on GitHub (Oct 5, 2022):
are you sure they were exe's and not just data files?
edit: data files are stored in your user account's appdata/roaming folder
@BurntDog commented on GitHub (Oct 5, 2022):
Make sure you get this software from here only. FYI just by being connected to the internet alone your at risk. This program itself has proven secure.
@tomjonesius commented on GitHub (Oct 5, 2022):
I don't think any of the 3 were .exe files. However I never actually ran the program so how would the files have gotten in my system?
@BurntDog commented on GitHub (Oct 5, 2022):
https://github.com/quasar/Quasar/releases/download/v1.4.0/Quasar.v1.4.0.zip
@edcdecl commented on GitHub (Oct 5, 2022):
if you didnt run quasar then theyre 100% unrelated.
@tomjonesius commented on GitHub (Oct 5, 2022):
My AV identified them as Quasar and one came up as a password stealer (i think client.bin?)
@edcdecl commented on GitHub (Oct 5, 2022):
client.bin is a file that quasar uses to generate the client
because client.bin probably the entire client code, it detects client.bin as a wide variety of threats (password stealer is their way of saying password recovery)
@tomjonesius commented on GitHub (Oct 5, 2022):
How did it end up in my files without me opening the program though? That's the part that's got me concerned
@edcdecl commented on GitHub (Oct 5, 2022):
client.bin is part of quasar. it's in the zip file.
@tomjonesius commented on GitHub (Oct 5, 2022):
I know, however, the .zip file was not even on my machine when I did the scan
@edcdecl commented on GitHub (Oct 5, 2022):
your av probably quarantined it. explains why client.bin wasnt where you put quasar.
@BurntDog commented on GitHub (Oct 5, 2022):
If you don't understand how these programs work it's best for you not to use it until you do.
@tomjonesius commented on GitHub (Oct 5, 2022):
Can you point me in a helpful direction to find out more
@BurntDog commented on GitHub (Oct 5, 2022):
There are videos on YouTube that help you better understand this app. That client.bin file alone can't do anything. It's used in both compiling or setting up this app.
@tomjonesius commented on GitHub (Oct 5, 2022):
Ok so just to clarify.
BitDefender is tripping and my computer is fine?
@edcdecl commented on GitHub (Oct 5, 2022):
yes. a program can't do anything unless you invoke it.
@MaxXor commented on GitHub (Oct 5, 2022):
@ErickDaCoder @BurntDog Thanks for covering this issue. I think everything to get in the right direction has been said. You can also check out this guide: https://github.com/quasar/Quasar/wiki/Getting-Started
However, @tomjonesius I don't think this AV scan is meaningful if you didn't do a scan BEFORE and AFTER downloading Quasar. It could be possible that you had a virus on your computer for weeks and just now noticed it.
@knackrack615 commented on GitHub (Oct 8, 2022):
Probably what happened here is OP used WinRAR's drag and drop function to extract Quasar, WinRAR will temporarily drop the files on %temp% when extracting that way, that's most likely what was detected.