search

VolantisDev / Launchpad

Step up your non-Steam game! Generate Steam-compatible .exe files to effortlessly launch any game through Steam with overlay support.
https://launchpad.games
MIT License
85 stars 3 forks source link

Launchpad-9.4.0.exe installer flagged as Program:Win32/Uwamson.A!ml by Windows Security/Defender #350

Open FlaminSarge opened 2 years ago

FlaminSarge commented 2 years ago

Describe the bug The installer's being flagged as potential malware on Win10, unsure if anything's changed but this only started happening recently. In addition, VirusTotal also flags this file: https://www.virustotal.com/gui/file/32021bc83415772b217a5db312fc20df25185a4ab55b5d318af014bba57ec74f

To Reproduce Steps to reproduce the behavior:

  1. Download Launchpad-9.4.0.exe from Github releases page
  2. Scan with Windows Security (right-click context menu option)
  3. File gets flagged as a PUP: Win32/Uwamson.A!ml

Expected behavior This wasn't occurring prior to today.

Screenshots If applicable, add screenshots to help explain your problem.

Required Details

Additional context

bmcclure commented 2 years ago

I built the installer myself and I am positive there is no malware in it. I'm not sure offhand if there is some way to prove that it's safe or not, but I've seen these warnings too on multiple Launchpad versions, and I think they are similar to this: https://www.autohotkey.com/boards/viewtopic.php?t=90504

bmcclure commented 2 years ago

Based on those forum topics, I will see if I can submit the Launchpad installer as a false positive on my end. Anyone else getting these messages, it would be helpful if they could also submit the file to their antivirus provider as a false positive so they can hopefully eventually mark it as safe.

bmcclure commented 2 years ago

One more thing, the fact that it just started showing up for you when you posted this makes me think that something changed on the Defender side of things to start marking it as malware, since there weren't any significant changes on the Launchpad side.

It seems virus scanners tend to not like AutoHotKey scripts, particularly when they are compiled into an .exe, and even more particularly when they're compressed into an installer.