search

Kethsar / ytarchive

Garbage Youtube livestream downloader
MIT License
1.18k stars 93 forks source link

Windows Defender detects go rewrite as "Trojan:Script/Sabsik.FL.A!ml" #47

Closed Lytexx closed 3 years ago

Lytexx commented 3 years ago

Will probably scare off a lot of people if it stays like this

Kethsar commented 3 years ago

Of course it does. Though it didn't for me when testing in my VM. I was expecting Go to be less susceptible to that garbage than the Python packager.

Kethsar commented 3 years ago

No matter how much I look into it, the only method to fix this, which is still not really guaranteed, is to buy a codesign cert and properly sign each binary (thanks M$). I have pretty minimal reason to bother though, so that's not happening.

Still, surprised Windows Defender detects it since Virustotal has Microsoft listed as seeing it as clean. Virustotal link for the most recent binary I built: https://www.virustotal.com/gui/file/a1e44627b991843acb50120594d1e7c0d2bb6b92eaa64b458db4ada11e996338?nocache=1

Edit: You know shit is flaky when just putting it in a zip file decreases the detections. https://www.virustotal.com/gui/file/cda06cb8de6f522ba050cd79d2010e09cec8004b5290d092cccb965a9425ad3d?nocache=1

Antivirus software is such hot garbage.

user334 commented 3 years ago

Didn't have an issue with Windows Defender and any version of ytarchive on my machine but Symantec Endpoint Protection on another laptop has removed prebuilt version RC2 of Golang rewrite.

Lytexx commented 3 years ago

doesn't happen anymore, looks like it's fixed

Kethsar commented 3 years ago

More like it's random. Chances are it will happen again in the future cause lol anti virus.