DavidKinder / Git

Fast Glulx interpreter, originally written by Iain Merrick.
MIT License
46 stars 13 forks source link

1.3.6 virus detected? #11

Closed ghost closed 3 years ago

ghost commented 3 years ago

What on Earth? 1.3.5 is somewhat fine. But 1.3.6 is rigged with virus?

Windows Defender detected one. Virus Total detected tons of it.

2021-06-12_13 55 38_Saturday 2021-06-12_13 50 44_Saturday

DavidKinder commented 3 years ago

False positive generated by stupid virus checkers. Tested by rebuilding Windows Git from source with my Visual Studio 2019 install: rebuilt git.exe is flagged by Windows Defender, but no other rebuilt executable is.

I have updated my Visual Studio 2019 to the very latest version, and rebuilt Windows Git, and now stupid Windows Defender is happy. I've updated the release with the new executable.

CailanVR commented 2 years ago

The file is now recognized again by Windows Defender, among other engines. This time with a new threat, as seen below. image The VirusTotal page has grown worse as well, which you can find here: https://www.virustotal.com/gui/file/05e21b836d923172f323d307a2abc3be609a3430c0542545d88a6c2166bfb00d

DavidKinder commented 2 years ago

I don't see this from Windows Defender here, I've got version 1.353.1825.0. These false positives seem to come and go with no rythme or reason.

At some point soon I will get round to buying myself a personal code signing certificate. This won't help directly with these false positives, but at least will give some assurance that the executable has not been modified since I released it.