A question about Slush Puppy's Retime Tool
3 years ago
Poland

In order to measure times of my runs as precise as it is possible and in the easiest possible way as well, I tried out Slush Puppy's Retime Tool. From what I heard many moderators use it during the verification process of new runs.

So far I am really satisfied with it. It's easy to use, precise, user-friendly, doesn't require to download a video to time a run.

However, after I downloaded it from he source at https://github.com/Slush0Puppy/retime and tried to run it, Windows warned me that app is of unknown origin (...), but I ignored it and launched it, since I didn't have any worries about this popular software used by many speedrunners.

SPRT worked completely fine and my antivirus software did not find anything suspicious or something. I have a habit of checking downloaded files with VirusTotal, so I checked SPRT as well. I was pretty surprised to see that it had 4 threats detected as a .zip file and 7 threats (malware, trojans, malicious software and such) after I checked the folder after unzipping downloaded catalogue. The file which caused the most problems, according to VirusTotal, was the main one, I mean: !speedrun retime tool v1.2.0.exe

Anyway, moving straight to the question I wanted to ask: why VirusTotal's scan found not one or two, but several possible threats in that file? Are they really false positives that sometimes appear when you scan various files (i.e. from GitHub), or are those files really infected? I don't believe it's the latter since this app works completely fine, is very popular (I am myself thankful to Slush Puppy for creating that kin of helpful software), doesn't require any special permissions or similar stuff, but I wanted to ask just to assure myself in 100%.

Texas, USA

If you're worried about download issues, try @dadinfinitum's online version of the app: https://mattbraddock.com/yt-frame-timer/

None of the files on SPRT are malicious (they are on my computer as well and seem just fine -- text files and Python files).

SPRT was the first iteration of an idea which kinda started around December 2018 in the Nitrome Discord. It was more of a passing comment like "wow, wish we had this" and then Slush went and made it. However, a downloadable program isn't always the best solution. In this case, I think it would be more helpful for users to use the online version (like yt-frame-timer) to work out of so they don't have to deal with download files.

For those interested in open-source work on the retimer or other speedrunning related tools, please join the Code Runners Discord: https://discord.gg/J2KaVzs

Also pretty please srcom put yt-frame-timer on the official resource page so more mods can find it :)) (Or, integrate a youtube retimer into srcom for mods. The programming of this feature should take a few days at the most because we've already got a working version of this in JavaScript)

Symystery and coachen like this
Poland

Thank you @TaruPanther and @Oxknifer for your responses!

I thought those positives might've been false reports. Like I said, this is an useful and popular app used by many people in the world of speedrunning, so that was the first sign to think it is safe to use. It is easy to use and doesn't seem to do anything besides measuring times (and indeed it doesn't do anything besides that), so that's another argument for it being completely safe.

What's more, while there were several "false positives", famous and known for their efficiency antivirus engines like Kaspersky or Norton found this software's files as completely safe (as I remember, Norton only marked them as not popular, but safe to use). I'm not saying that Ikarus which detected the .exe file of this app is bad or something, but I was curious why it marked a file that looks completely fine as malicious, along with several other antiviruses.

In most of cases I encountered on VirusTotal, "false positives" were only in few cases, like one or two, not seven as happened with Slush Puppy's Retime Tool. Anyway, out of pure curiosity and to assure myself in 200% (lol) I spoke to Slush Puppy directly. That issue of some antiviruses detecting files creating in Python and turned into stand-alone executables, is known by many developers and users and for some reason, a lot of antiviruses seem to see anything made by pyinstaller as a virus of any kinds. Here's the link provided by Slush Puppy: https://github.com/pyinstaller/pyinstaller/issues/2988#issuecomment-343674665 if you are also curious like me and want to read some more about this issue.

Anyway, it was good to hear that this software is completely safe to use. :) Like I said, it's very useful, simple to use and user-friendly. Problems with not being able to time and/or retime runs as precise as it is possible by runners who are not that much into video editing are no more, thanks to this tool.

Finland

yeah definetily false positives

also kinda off topic (and the reason im really even commenting :D ) but since Liv mentioned w10 defender i have to say this as its really annoying :P the w10 defender has deleted my own made games which was super confusing at first, "where are my games???" and then it became annoying :)