search

ben-wallis / Filtration

The Path of Exile loot filter editor
GNU General Public License v2.0
262 stars 61 forks source link

Filtration 1.2.1 flagged as malware #135

Open jcbollinger opened 5 years ago

jcbollinger commented 5 years ago

Shortly after updating to Filtration 1.2.1 from v1.2.0 via the built-in self-update, BitDefender "detected potentially malicious behavior and blocked all applications involved." In particular, it quarantined Filtration\Filtration.exe and Filtration\app-1.2.1\Filtration.exe (and my desktop link), each flagged with threat name "Atc4.Detection".

ben-wallis commented 5 years ago

I'm guessing it's some kind of heuristic that's triggered by the self update mechanism (which uses Squirrel) - VirusTotal shows the file as clean, even by BitDefender: https://www.virustotal.com/gui/file/dc7bb3058eff0f8d558b5aacc41405a3570ab111669e2bf0c159edf506e749f3/detection

There's a post here about another app using Squirrel triggering the same detection: https://github.com/FreeTubeApp/FreeTube/issues/104

That post does say that it's caused by the executable not being signed, but unless anyone can point me at a Code Signing cert provider that doesn't cost $100/year then unfortunately I'm not going to be able to code sign Filtration.

I think all I can suggest for now is that you manually exclude the C:\Users\<username>AppData\Local\Filtration directory from BitDefender's scanning.