Dedalo_69
Walkthrough
View attachment 4237081
Resort of Temptation [v0.0.6] [Inceton games NTR]
Hi guys, I created this simple WT Mod for those who want to make their life easier in the game.
I hope you like it...
See you next time
I know it's probably a false positive but the attachment says Virus right on it, so I imagine people will be hesitant to download it.
The walkthru file says "[VIRUS]" in there beginning of the file name? Uhh...
what about the WT mod?
It's been named as virus, and also been detected by f95zone to contain virus?
I know some false positive for renpy games, but never ever have i encountered f95zone to flag them for any reason other than REALLY being infected.
Don't want to download anything until officially confirmed to be virus free.
dedalo_69 Unusual that this has a virus. You might want to check it as it definitely has a virus
Ok, the WT mod is literally two files: a Ren'Py script
ep01.rpy
and its compiled version
ep01.rpyc
.
No executable, no dll, etc.
While it is not excluded that a script may contain malware, the good thing of a script is that it is
human readable (of course I'm talking about the uncompiled version), so I just compared the
ep01.rpy
in the WT mod with the original one (using
You must be registered to see the links
), and I can assure you that it only contains:
1) choiche highlights (literally just setting to green the choice the author of the WT considers the best)
2) a couple of cheats to see both of two mutually exclusive scenes in a couple of points in the story.
There's absolutely no way that those changes may be a virus or any type of malware.
---
The problem is that the .rpyc is not human readable. Sure, it is generated on the fly based on the .rpy
but a malicious developer (
maybe???)
could write a malicious script virus.rpy, let Ren'Py compile it as virus.rpyc and then rename it into ep01.rpyc and packed it along the legit ep01.rpy, so we check the .rpy, we see that it has no malware, and we also trust the .rpyc thinking it's just it's compiled version, while it is another thing.
Actually I don't think the scenario I have just described can work, because in presence of foo.rpy the Ren'Py engine will NOT execute an existing foo.rpyc but it will compile foo.rpy and generate a new foo.rpyc that thus is going to overwrite the malicious one.
BUT, since I'm not a security expert, TO BE EXTRA CAREFUL (paranoid?) I just repacked Dedalo_69's WT substituting the ep01.rpyc file with an empty file. Find it in the attachment.
Hopefully the false positive (just reported as a virus by Kingsoft among 62 antiviruses used by F95!!! - dudes, when F95 says "
You must be registered to see the links
for more details", please, do click)
Hopefully the false positive was due to Kingsoft failing to heuristically scan the compiled .rpyc, so with an empty one it should not signal it as virus.
If it still does, Kingsoft is simply wrong.
--- EDIT: LoL
quod erat demonstrandum Kingsoft - and Kingsoft only -
still classifies the file as a virus.
CASE SOLVED: Dedalo_69 is NOT GUILTY and Kingsoft is paranoid.
--- EDIT2: The attached ep01.rpy and ep01.rpyc are the same identical files provided in Dedalo_69's .7z archive: just decompressed and posted as I found them, with no change, and Kingsoft DOES NOT classify any of them as a virus!
It looks like
Kingsoft just can't handle compressed files!!!
-------------------------------------------------------------------------------------------------------------
P.S. The attached
ep01.rpy_ORIGINAL.7z archive just contains the ORIGINAL ep01.rpy file by Inceton. I just compressed it, and the mere fact that it's compressed cause Kingsoft to classify it as a virus, while if i just donload
ep01.rpy_ORIGINAL.7z and decompress it and attach it back here as
ep01_ORIGINAL.rpy Kingsoft
DOES NOT classify it as a virus
--- I kindly suggest F95 to get rid of Kingsoft...