T-Troll / alienfx-tools

Alienware systems lights, fans, and power control tools and apps
MIT License
445 stars 37 forks source link

8.6.0 is getting blocked by Windows 11 as "Virus Detected" upon download. #415

Closed dc-IV-AW closed 5 months ago

dc-IV-AW commented 5 months ago

I was able to use 8.6.0 as recent as today, but after a reboot, the Pinned Taskbar Icon would not launch. The .msi file has also been removed from my system. When attempting to download it again, it is blocked as "Virus Detected"

To Reproduce Steps to reproduce the behavior:

  1. Download 8.6.0 Release
  2. Confirm Windows Defender blocks download as "Virus Detected."

Expected behavior Latest .msi will download and be available in the local file system for installation.

Screenshots

Screenshot 2024-02-27 212405

Screenshot 2024-02-27 212307

System (please complete the following information):

Additional context None

dc-IV-AW commented 5 months ago

I checked in Windows Defender History: Screenshot 2024-02-27 223224

Sparib commented 5 months ago

Reproduced on m15 R6, Windows 11 Home

dc-IV-AW commented 5 months ago

Reproduced on m15 R6, Windows 11 Home

Another strange issue is that older version's .msi is just fine on my system and not detected as a Virus:

Name: alienfx-tools.msi Size: 905728 bytes (884 KiB) SHA1: 5e73c42106afa39ad1068a454077ff9388726c0f

When I installed it, and checking "About" it shows the following: Screenshot 2024-02-28 072330

So at least my Windows Installer folder still has the 8.6.0 version, and it is not getting flagged as a virus.

T-Troll commented 5 months ago

It happened from time to time - being honest, i'm tired to fight AV's false positive. I even have a page describing why this - https://github.com/T-Troll/alienfx-tools/wiki/Why-antivirus-complain-about-some-alienfx-tools-components%3F

100% of the source code available, no binary stubs, so you can clone repo, review and build yourself to be sure.

dc-IV-AW commented 5 months ago

It happened from time to time - being honest, i'm tired to fight AV's false positive. I even have a page describing why this - https://github.com/T-Troll/alienfx-tools/wiki/Why-antivirus-complain-about-some-alienfx-tools-components%3F

100% of the source code available, no binary stubs, so you can clone repo, review and build yourself to be sure.

Maybe the issue should be a Feature Request to change "In case you install tools version between 4.2.1 and 6.4.3.2, Anti-viruses can detect virus into project package."

to

"In case you install tools version between 4.2.1 and 6.4.3.2, in addition 8.6.0, Anti-viruses can detect virus into project package."

T-Troll commented 5 months ago

No, they always complain! I drop kernel driver in v7 - this doesn't help! The issue is i so close to hardware and the apps are unsigned.

Not only MS complain, other too. But others have a simple way to report false positive.

So... It's the question of trust. Build yourself, add to exception, do not use - it's all up to you.

dc-IV-AW commented 5 months ago

OK, so being new to Alienxfx-tools, I did not realize it could still be flagged. I will close this since it is not something that can be fixed.