DCC-EX / CommandStation-EX

EX-CommandStation firmware from DCC-EX. Includes support for WiFi and a standalone WiThrottle server. A complete re-write of the original DCC++.
https://dcc-ex.github.io/
GNU General Public License v3.0
155 stars 107 forks source link

Bitdefender detected malicious code in EX-Installer-Win64.exe #415

Open movinjim opened 3 weeks ago

movinjim commented 3 weeks ago

Windows 10, Bitdefender Total Security, latest release of EXInstaller.

BitDefender gives this error and quarantines EXInstaller, not letting it run.

The app C:\Users\Jim Lee\Documents\Maker Projects\DCCPlusPlus\EX-Installer-Win64.exe infected with Gen:Suspicious.Cloud.14.@x5@am0Do3p was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

I will not install EXInstaller at this time. Please advise. Thanks, Jim Lee

FrightRisk commented 3 weeks ago

Windows requires that programs like EX-Installer go through their onerous BitDefender approval process for every single version of software we release. They are not always prompt. That version should be approved soon, but there is nothing wrong with the file. You can prove this yourself by manually submitting the installer or the file to BitDefender on their website. It is a shame they have a warning insinuating a file is "infected" instead of the truth, which is "our cloud based quick check doesn't know what this is, so have labelled is suspicious". You can choose to use it, use a previous version that already has been flagged good by them, or use the Arduino IDE.

movinjim commented 3 weeks ago

Thanks for your prompt response and a clear explanation. You are right that it's a shame they report it as infected when it it not. As I'm wanting to update to the lastest version, I'll likely just use the Arduino IDE. A bit of a pain, but doable. Jim

pmantoine commented 3 weeks ago

Microsoft Windows Defender does not see it as a virus... so you're effectively paying for independent anti-virus company BitDefender to mislead you and result in you being disadvantaged.

Note too that you'll also need to use GitHub Desktop to be able to have access to development versions of DCC-EX which are trivially easy to access with EX-Installer.

habazut commented 3 weeks ago

As you are a Bitdefender customer you should have a way to tell them that you do not think that their product made the right decision. We as the DCCEX community can not contact all 3rd party companies that might decide to label our software in some way. We do that towards the OS vendors.