Genymobile / Genymobile/scrcpy

Windows 10 - virus

Open
#4,063 4 comments 1 reaction 0 assignees View on GitHub
Dominant language
C
Stars
150k
Forks
13.8k
Avg merge
4d 13h
Merged PRs (30d)
2

Description

Window 10 just informed me that my .vbs script contained a “severe” virus,
then went ahead and deleted it automatically.
Luckily I had it backed up in a .txt file somewhere else,
but if I try to make it again, Windows 10 immediately sees it, flags it, and deletes it again.
This was the content of the .vbs file:

```
' OnePlus 9
strCommand = "cmd /c scrcpy.exe --window-x 1067 --window-y 79 --window-width 463 --window-height 1028 --prefer-text --no-key-repeat --push-target=/sdcard/ --turn-screen-off"

For Each Arg In WScript.Arguments
strCommand = strCommand & " """ & replace(Arg, """", """""""""") & """"
Next

CreateObject("Wscript.Shell").Run strCommand, 0, false

' --crop 180:70:0:0 ' width:height:X:Y
' --window-title 'notification'
' --window-x 1018
' --window-y 152
' --window-width 88
' --window-height 32
' --window-borderless
' --always-on-top
' --stay-awake -w
' --turn-screen-off -S
' --prefer-text
' --raw-key-events
' --no-key-repeat
' --push-target=/sdcard/
'
' https://github.com/Genymobile/scrcpy#window-configuration
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the Windows 10 detection using the provided .vbs script and its scrcpy.exe command, then determine whether the alert is caused by the script or scrcpy. The issue names no project source file or test, and completion criteria are not defined beyond identifying and addressing the reported false positive.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, visualbasic
Domain
desktop-dev, operating-systems, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.