Decker

A multimedia sketchbook · By Internet Janitor

Add to collection

tool Community Devlog

Decker community

Update might be infected with an infostealer???? Help?????

A topic by Green Axol created Nov 30, 2024 Views: 811 Replies: 7

This topic is archived. It is unlisted and no new posts can be made.

Viewing posts 1 to 4

Green Axol1 year ago

So, i was going to use decker for like, five minutes, like i usually do, and i noticed that a new update had dropped recently, so i downloaded it and replaced the files on the old decker version with the new one, and tried to run it. It returned an error saying something along the lines of "This application contains a virus or does something potentially unwanted, so it has been prevented from running", and i thought that was weird, and then i tabbed out into Firefox so that i could upload the exe to virustotal, and only two antiviruses had flagged it as malware, plus nothing on the behavior tab seemed sus, but eventually windows defender also flagged it as malware, so i deleted the file, and the zip it came in. I also checked my system with SysInternals' Autoruns and ProcExp and i didn't see anything sus either. I am still a bit afraid that my info was stolen so i will be changing my email passwords just in case. Can somebody tell me what caused this to happen? I am afraid and confused :/

ahmwma1 year ago (1 edit) (+3)

First step: Breathe. Hang in there.

If there was a problem, the program already "has been prevented from running" by whichever Windows service stopped it.

I suspect that there's no problem at all -- which is good news for your personal info! I know from experience that Windows Defender tends to block most independent software (and each new version of that software, every time) when you first try to run them. It's usually not difficult to tell it to let the program run anyway if you know what it is and if you trust the source of the files.

(I don't mind having to tell Windows that my usual open-source programs are okay if it keeps weird mystery programs from running on my Grandma's laptop, y'know?)

In this case the phrase "or does something potentially unwanted" may just be Decker's ability to create deck files. Creating new files would be worrying if it was actually some kind of malware, but in the case of creative software it's quite necessary to be able to save your work.

For what it's worth, I had Windows Defender scan my copies of Decker 1.52 as a program and in it's zip that I downloaded here on itch.io and it didn't find anything suspicious or unusual. And despite finding nothing weird it still prevented the new version of Decker from running the first time I tried to open it. Because it always does. And I told it to "Run anyway", as always. And everything about Decker 1.52 seems completely fine and normal here.

It's good to be safe! It's a very good practice to change your email passwords occasionally, whether or not there's a problem. But I think there probably isn't one this time.

If you're still concerned, you can always build Decker from source. Here's the link to Decker's GitHub.

Green Axol1 year ago(+1)

Thank you for your detailed reply! I just got a bit paranoid as I didn't get this error on earlier versions of decker, lol. I think I'll try downloading it again, thanks!

what tired315 days ago

Hello, I have a silly question to ask. How can I replace the old deck file with the latest version? It's a bit difficult for me because my native language is not English.

Screwtapello315 days ago(+1)

Are you using a .deck file (which you have to load into a program running on your desktop or laptop) or a .html file (which you run in a web browser)?

If you are using a .deck file, you don’t need to replace it. You can replace the old Decker.exe with a new one downloaded from Itch, and it will be up-to-date.

If you are using a .html file in a web browser, it contains both your deck and a copy of Decker that runs in the browser. To update that version of Decker, you can:

go to https://beyondloom.com/decker/tour.html which always has the latest HTML version of Decker
from the File menu, choose “Open…”
you should be prompted for a deck to open; choose the deck you want to update
your deck should now be running in the updated Decker in the browser
from the File menu, choose “Save As…”
when asked, choose a filename that ends in .html and click Save
your browser should start downloading a file with the name you chose; it will be your deck wrapped in an updated version of Decker

what tired295 days ago

Thank you very much for your help. I successfully replaced my Decker work with the latest version, but another unfortunate event occurred. After the update, some components in my file seem to no longer function as they did before, and the text layout has become strange. This has alarmed me, so I began searching for older versions of Decker to try to revert everything. Unfortunately, I couldn't find where to download them。。。

ahmwma295 days ago

Could you show examples of what's gone wrong? A screenshot of the layout problem, or an explanation of the parts that aren't functioning.

I'm very curious to know if it's something that can be fixed.

If it can't be fixed, then I'm sure someone here can help you get an older version to finish your current project.

what tired295 days ago(+2)

Just now, I found a solution. It seems that the functional components of the new version have also been updated. I transferred the new version of the components from the new version example folder to my decker, and fortunately, it works now. This really scared me, so I came for help immediately without even trying to solve it myself. But thank you for being willing to help me.❤

Internet JanitorDeveloper archived this topic 288 days ago

This topic is archived. It is unlisted and no new posts can be made.