Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updater exe is flagged as virus #2

Open
piratebriggs opened this issue Dec 30, 2019 · 9 comments
Open

Updater exe is flagged as virus #2

piratebriggs opened this issue Dec 30, 2019 · 9 comments

Comments

@piratebriggs
Copy link

Hi,

I know that you're not responsible for the original flysky updater exe's, but do you know why they are being flagged as Trojan:Win32/Occamy.C by windows defender?

That particular trojan appears to contain nc.exe so I woundered if flysky is doing some "calling home" during the update?

Anyway, I scanned the file with both ESET and Kapersky and they said the file was clear so I've updated my TX now - Cheers!

@Cleric-K
Copy link
Owner

That's strange. I also use the windows' stuff but never got any alerts for these updaters.
It's most certainly some kind of mismatch, I haven't seen a sign of calling external processes or networking api in the code. I'll look more closely when I get a chance.

@Stugre
Copy link

Stugre commented Apr 23, 2020

Hello, just signed up to github to leave this comment, but windows defender and indeed google chrome has blocked the download of both the original file and the revised one you have worked on. Not sure if its even something you can fix, but its a shame it cant be downloaded. I miss the good old days when you could give your computer AIDS just to get the latest software :(

@Cleric-K
Copy link
Owner

I really have no idea why this happens. On my Windows machine everything is updated with latest definitions for Defender but the exe is not detected as virus. Maybe try downloading with different browser and stop defender while running.

@Ver1laso
Copy link

Ver1laso commented Aug 9, 2020

Hello, as same as Stugre I just signed up to thank you your work but also coment I have the same Issue, It detects the .exe as a virus, and I could not download it... the only way was using explorer as firefox and chrome were blocking the download, I flashed and all worked perfect, thanks very much for your work dude :)

@StageCannons
Copy link

Tried to get this to download via both IE and Chrome, both failed due to "virus found".

@Ver1laso
Copy link

Tried to get this to download via both IE and Chrome, both failed due to "virus found".

You need to deactivate the scanning option on your browser to be able to download it, otherwise will keep saying you have a virus, but it's clean

@DG9BFC
Copy link

DG9BFC commented Jun 4, 2022

i have the same problem ... i could say to my firefox "download anyway" and it works (in first view)
tried to open and copy into a folder to work with it again flagged it as a virus .. grmbl
finally i could copy it (now to solder some cables to make an adaptor for the trx)
....
in your fw that gives much cleaner stick readouts ... are there also the other nice things added from qba667???

can`t we have ONE source to find newest fw with all bings and boings added?!? (just thinking)

greetz sigi dg9bfc

@Cleric-K
Copy link
Owner

Cleric-K commented Jun 5, 2022

i have the same problem ... i could say to my firefox "download anyway" and it works (in first view) tried to open and copy into a folder to work with it again flagged it as a virus .. grmbl finally i could copy it (now to solder some cables to make an adaptor for the trx) .... in your fw that gives much cleaner stick readouts ... are there also the other nice things added from qba667???

No, it's just the bug fix.

can`t we have ONE source to find newest fw with all bings and boings added?!? (just thinking)

Theoretically, yes. But the Flysky platform doesn't see much development anyway so it's probably not worth the effort. Power users choose OpenTX platforms anyway.

@Growflavor
Copy link

Growflavor commented Mar 7, 2023

A) The 2022 OEM i6x firmware updater seems better 'malware wise' according to VirusTotal:
https://www.flysky-cn.com/i6x-xiazai-1

B) Also, for applying Cleric-K's bug fix without the updaters flagged as malware, you can do what I did which is to:

  1. put the i6x into DFU mode by jumping the R53 pads at TX power up. This youtube video shows how:

"How to unbrick the Flysky FS-I6X transmitter"
https://youtu.be/VSSL7amMaOI?t=172

  1. Then use the STM32cubeProgrammer (or the older DfuSe Demo program in the links supplied by the above youtube video) depending on which device driver installs on your OS:

https://wiki.st.com/stm32mpu/wiki/STM32CubeProgrammer#STM32CubeProgrammer_installation

https://wiki.st.com/stm32mpu/wiki/STM32CubeProgrammer#How_to_check_if_the_DFU_driver_is_functional

https://www.st.com/en/development-tools/stm32cubeprog.html

to easily send the updated 'fixed' "FS-I6X_with_bootloader.bin" firmware to the i6x via USB:

https://github.com/Cleric-K/FlySky-i6X_Firmware_BugFix/tree/master/build

or you can use the "DFU File Manager" that comes with the STM32CubeProgrammer to extract the .bin from the .DFU provided with the video "How to unbrick the Flysky FS-I6X transmitter"...they are nearly identical .bin...the one from the .DFU has the date firmware date of October 23 2019 so it is easy to see the change in the i6x Firmware version menu.

The youtube video below shows how to easily connect the STM32cubeProgrammer via USB & send a firmware (you can also read & save the current firmware on your device as a backup):

"STM32 Programming via USB (DFU) - Phil's Lab #72"
https://youtu.be/VlCYI2U-qyM?t=203

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

7 participants