TFM.exe Trojan in rootfs
Alea-iactaest opened this issue · comments
The file TFM.exe in location \proot-distro\installed-rootfs\ubuntu\opt\TFM.exe gives the following result in virustotal.
https://www.virustotal.com/gui/file/f96b1d8fcf19c95f1634f226347410c83798a726774abbcd2baf4e34bfa4b7e7
So, this file seems like a virus and I wanted to know what it does.
You can replace it to original TFM from GitHub (It has only 2 false detects, you can check source code if you not sure): https://github.com/radzikpwnz/tfm/releases/download/v1.0.1/TFM.exe
https://www.virustotal.com/gui/file/e0b4688675a1d09dd3ce1517fe88e5f506cb1eceadfaadd94dc2cb4b9c69c30a
Tiny File Manager (or TFM if you prefer) is a file explorer made by Eltechs, developer of Exagear, this version of TFM in particular, it comes with a program that helps to make the Start menu bar appear, I honestly don't know who is the author of this modification, but this executable "TFM.exe" is widely used in Exagear modifications made by the community. Ilya , who is making a fork of Box4droid, is using 7zip as an explorer, I also intend to use it as the main explorer in the project, but there is still no date for that. What I recommend is that you download some versions of Exagear made by the community and get the executable TFM.exe (generally it is in /opt) and redo this test to see if the result is the same.
Update: TFM was not developed by Eltechs, it is a fork of the repository that @Ilya114 sent in the message above.
Thank you for clarification.
I replaced the given TFM.exe with the original one provided by @Ilya114 and everything is working good for now.
And Thank you for making this project
Thanks also for notifying me about this, I will replace this TFM with the original one