Trojan

[MunchDK]

My F-secure found Trojan.TR/AD.NsisInject.yzerl in the USB creator. I don't know if the scanner is being overly cautious or if there is an actual issue.  

[ChatNoir]

I just installed 1.0.1 version and I didn't any alert from ESET.

[bbben]

NordVPNs FileChecker did block my "unraid-usb-creator-1.0.1.exe" download too and told me, that it found the threat: "TR/AD.NsisInject.5432a7"

[Rysz]

71 virus scanners/engines say it contains no virus...

 

https://www.virustotal.com/gui/file/5432a7db786a1c1819bd14366bdd3d7691888b8d3ee5363c4cf88ab6d8f1c71b

 

It is however possible that your computer already contains some malware that injects itself into incoming (new) files.

 

[ailouw]

Avira flagged my .exe as well... 
If my system was already infected wouldn't all new .exe downloads also be flagged?

[bbben]

I downloaded the .exe on my iphone and submitted it to virustotal, just to remove my system (and windows) from the loop. Still got two detections...

Don't know if this is even possible, but could there be an infected version cached on a european server for download? I am downloading from Germany.

[Rysz]

5 minutes ago, bbben said:

I downloaded the .exe on my iphone and submitted it to virustotal, just to remove my system (and windows) from the loop. Still got two detections...

Don't know if this is even possible, but could there be an infected version cached on a european server for download? I am downloading from Germany.

 

Interesting, the link I posted above now also shows two positive detections. @ljm42?

[bbben]

Tried to use the manual installation method but got another trojan warning in 6.12.13:

https://www.virustotal.com/gui/file/57dab4240d2aad2f6b52212dfc8fa56c8806cce9a369dd4d981a7e86da9189db

 

 

Previous version 6.12.11 however seems to be ok

https://www.virustotal.com/gui/file/e6b02650dce042b497e86ae9300bfaa9845bf49c0e76d65a13a1e6a9607e8fb2

[OrneryTaurus]

They're using NSIS (Nullsoft Scriptable Install System) which certain AVs and newer threat detection companies (Crowdstrike, Sentinel One, etc) don't like. They see it as a threat even when it's not. Some will see it's digitally signed and ignore it, others won't.

 

You can always use the old manual method if you want to be safe.

 

https://docs.unraid.net/unraid-os/getting-started/manual-install-method/

Edited October 6 by OrneryTaurus

[Aruxal]

Got same trojan warning from NordVpn as folks discussing above after decided to try the product yesterday.
 

Looks suspicious and the issue is not new. Does anybody care?
 

How do I get trial key if i cannot download the installer? I found no other way or description how to get the key. 
 

please help!

[JorgeB]

38 minutes ago, Aruxal said:

How do I get trial key if i cannot download the installer?

It's mentioned just above your post:

https://docs.unraid.net/unraid-os/getting-started/manual-install-method/

[Rysz]

40 minutes ago, Aruxal said:

Got same trojan warning from NordVpn as folks discussing above after decided to try the product yesterday.
 

Looks suspicious and the issue is not new. Does anybody care?
 

How do I get trial key if i cannot download the installer? I found no other way or description how to get the key. 
 

please help!

 

You don't need a trial key, every installation on a new USB starts in trial mode... 🙂 

[Aruxal]

I used the manual install method because I was unable to use the Installer. Worked fine.

Signed in and cannot do anything else because I have no trial key:

 

Which part of https://docs.unraid.net/unraid-os/getting-started/manual-install-method/ speaks about the trial key? What do I miss?

[Aruxal]

1 hour ago, Rysz said:

 

You don't need a trial key, every installation on a new USB starts in trial mode... 🙂 

it says you do:

[JorgeB]

8 minutes ago, Aruxal said:

Signed in and cannot do anything else because I have no trial key:

Trial key is requested using the drop-down, top right.

[Rysz]

12 minutes ago, Aruxal said:

it says you do:

 

My bad, I meant you can request it from inside the OS.

[Aruxal]

3 minutes ago, JorgeB said:

Trial key is requested using the drop-down, top right.

Thank you for a quick response. Could you please be more specific? Which part of drop-down?

Is there any Doc/HowTo about how to get it?

 

 

 

[Aruxal]

5 minutes ago, Rysz said:

 

My bad, I meant you can request it from inside the OS.

Oh, thank you. Well... You are the second person stating that without any details. From where exactly? Could you please give me a step-by-step? Thanks!

[Rysz]

19 minutes ago, Aruxal said:

Oh, thank you. Well... You are the second person stating that without any details. From where exactly? Could you please give me a step-by-step? Thanks!

 

There's no step by step as the USB is blacklisted, you'll need to contact support or use another USB for Unraid.

[JorgeB]

22 minutes ago, Aruxal said:

Which part of drop-down?

That part, but according to that screenshot your flash drive doesn't have a valid serial, likely it's mostly zeroes, you will need to use a different one.

[Aruxal]

2 minutes ago, Rysz said:

 

There's no step by step as the USB is blacklisted, you'll need to contact support or use another USB for Unraid.

Thank you, your responses are the only thing that keeps me looking at UNRAID at all because I need to decide which platform I will use.

I'm using fresh micro SDXC just from the box, not sure what means "Blacklisted".

If they expect users to try their product before buying that could be better documented and prepared than suggesting to call support as a first action.

Thank you again for your patience.

[Rysz]

2 minutes ago, Aruxal said:

Thank you, your responses are the only thing that keeps me looking at UNRAID at all because I need to decide which platform I will use.

I'm using fresh micro SDXC just from the box, not sure what means "Blacklisted".

If they expect users to try their product before buying that could be better documented and prepared than suggesting to call support as a first action.

Thank you again for your patience.

 

I'm sorry, but this really is something that only official support can handle, hence my suggestion.

In any case, it's likely related to using an SDXC instead of an USB stick, so I'd try with that instead (if possible). 🙂 

[elibosley]

Hey All - Thanks for flagging this.

The code for the entire USB creator is open-source, I don't think it's happening from that unless it's NSIS as stated earlier. 

Here's the repo: https://github.com/unraid/usb-creator-next

[Aruxal]

1 hour ago, elibosley said:

Hey All - Thanks for flagging this.

The code for the entire USB creator is open-source, I don't think it's happening from that unless it's NSIS as stated earlier. 

Here's the repo: https://github.com/unraid/usb-creator-next

Thank you! This is great info for those who can and are willing to dig into this.

 

As a user, I watched Youtube video comparison of TrueNas comparison to UNRAID and decided to look at it. 

 

The first thing I got was a malware warning... What would you normally think? RUN!!!

 

I also scanned my machine with 3 different tools to make sure this is not me causing this. 

And also had trouble getting a Trial Key - turns out you cannot use brand new SDXC card because of "Blacklisted" GUID etc.

 

I feel I will leave this project to mature for another year or two before paying my $$ for it...

 

[itimpi]

1 minute ago, Aruxal said:

And also had trouble getting a Trial Key - turns out you cannot use brand new SDXC card because of "Blacklisted" GUID etc

There is a requirement that the boot device has a unique GUID - sounds as if what you tried did not.