search

GuVAnj8Gv3RJ / NeosAccountDownloader

Downloads your Neos account to your local computer.
MIT License
39 stars 12 forks source link

Windows Defender Virus Detected #115

Open BeagleDragon36 opened 1 year ago

BeagleDragon36 commented 1 year ago

When trying to use this program on the newest version of Windows Defender (updated literally 30 mins ago at the time of posting this) it flags it as a virus and refuses to let it run. Same issue was with 1.10.2 when trying to run after the update. It auto-deleted itself after windows had a freakout about it being a virus. I downloaded and used 1.10.2 a week before updating and it worked perfectly fine image image

GuVAnj8Gv3RJ commented 1 year ago

This periodically happens as Defender hasn't seen the EXE before.

It can usually be fixed by uploading the exe to virus total and waiting a little while.

I've uploaded it and you can find the scan here: https://www.virustotal.com/gui/file-analysis/MjI3ZjZmMjVlNjhjZmU0YWE0NGUxMWU3ZTAxNjlhYmI6MTY5MTU1NzQ3Mw==

There's nothing I can do other than that or signing the code, which i will look into but it is usually tricky.

BeagleDragon36 commented 1 year ago

I trust it but windows doesnt, and so doesnt Zillya. could this be causing the issue?

GuVAnj8Gv3RJ commented 1 year ago

I've made a few security updates to help with those who might doubt that this is a false positive.

  1. You can now verify the checksums of the builds on GH to verify they have not been tampered with: https://github.com/GuVAnj8Gv3RJ/NeosAccountDownloader#verifying-checksumsintegrity
  2. There is now automated security code scanning: https://github.com/GuVAnj8Gv3RJ/NeosAccountDownloader/security/code-scanning

These don't help with it being flagged by windows, but signing is somewhat expensive. I was looking into: https://www.sigstore.dev/ but I need to do additional research.