KRTirtho / spotube

🎧 Open source Spotify client that doesn't require Premium nor uses Electron! Available for both desktop & mobile!
https://spotube.krtirtho.dev/
Other
31.27k stars 1.3k forks source link

smtc_windows.dll marked as trojan by windows defender #1894

Closed Alex25820 closed 2 months ago

Alex25820 commented 2 months ago

Is there an existing issue for this?

Current Behavior

I installed the latest version (v3.8.1) of Spotube using the windows installer provided in the GitHub releases page a few days ago and used it without any problem. Today when I launched the program windows defender detected a trojan in smtc_windows.dll and put it in quarantine before deleting the file. Reinstalling the program and the launching it triggers the same response from windows defender. Since the file smtc_windows.dll is deleted Spotube will no longer launch.

Here is a picture of what windows defender says: Windows defender history Details translates to: This program is dangerous and runs commands from an attacker. Learn more link leads here.

Expected Behavior

Spotube launches without windows defender detecting a trojan.

Steps to reproduce

  1. Install the latest version (v3.8.1) of Spotube on windows using Spotube-windows-x86_64-setup.exe from GitHub releases.
  2. Launch Spotube after the installation is done.
  3. Windows defender will detect a trojan in smtc_windows.dll.

Operating System

Windows 11

Spotube version

v3.8.1

Installation source

GitHub Releases (Binary)

Additional information

None

MrGumpIT commented 2 months ago

I had the same problem

NoirPi commented 2 months ago

image Same here...

Donnervogel commented 2 months ago

Same issue

ashwinjadhav818 commented 2 months ago

Same here

KRTirtho commented 2 months ago

It's literally built in Microsoft's own Github actions. And it sees as trojan 🤦

I guess it detects that this DLL uses Windows's SystemMediaTransportControls API to provide media playback control. So thinks it as a trojan disguising itself as a legitimate software

RKDeviancy commented 2 months ago

This happened to me last night. Decided to try it again today, and it didnt flag it this time. Probably just windows defender being sensitive for a moment?? I'm not one who would understand the inconsistency

Alex25820 commented 2 months ago

I just tried installing the latest version of Spotube again and the issue appears to be resolved now.

If anyone is still having the same issue try updating windows defender by going to Virus & Threat protection updates in windows defender and press Protection updates, then Check for updates.

Feel free to close this issue.

KRTirtho commented 2 months ago

Hmm, it definitely was a false alarm but I guess someone reported this and they patched it.