danielbohannon / Invoke-Obfuscation

PowerShell Obfuscator
Apache License 2.0
3.7k stars 765 forks source link

Contains Virus #58

Open SpergLordAndy opened 3 years ago

SpergLordAndy commented 3 years ago

Windows Defender altered me that this code contains Splitfuse.C. Don't download unless you're equipped to deal with some viruses.

namangoel19 commented 3 years ago

yes even I have faced the same problem.

rikuru-to865 commented 3 years ago

I think it's a false positive

SpectrixDev commented 2 years ago

Windows Defender altered me that this code contains Splitfuse.C. Don't download unless you're equipped to deal with some viruses.

It's a false positive.

As @danielbohannon says:

"I do not have any control over Windows Defender signatures hitting on this project's source code."

This program triggers many false positives. On Microsoft's website they say the reason for this is "they (obfuscated code) can be associated with malware or unwanted software".

The author of this project has gone to many talks about this program, so I feel like it's kinda certain that he hasn't ratted it out? Idk, I've been using it for a while and it's all good.

y0k4i-1337 commented 2 years ago

Most of the tools like this will probably trigger some AV...Besides, the project is open source, so if you don't trust it you should review the code by yourself.