hellzerg / optimizer

The finest Windows Optimizer
GNU General Public License v3.0
14.72k stars 965 forks source link

Antivirus blocks Optimizer #546

Open HGStyle opened 2 months ago

HGStyle commented 2 months ago

Describe the bug Well, that's a simple one, antiviruses (atleast ESET, but I believe other does too) simply won't let me use your software in its latest version. The 2023 version works fine but the latest version now doesn't works. The funny part is that it still doesn't let me use the latest version after disabling every security feature in ESET, but perhaps that's a bug in the antivirus...

Expected behavior That it works and do not get flagged by antivirus software as suspicious.

Screenshots image image

Logs I can't upload logs, the software doesn't start if I use the "bugged" version.

Desktop (please complete the following information):

hellzerg commented 2 months ago

Can you exclude the app from ESET?

HGStyle commented 2 months ago

Can you exclude the app from ESET?

Yes, but it's kinda tedious to do with ESET. I need to restore the file from the quarantine, then I need to copy the file path from the file properties, then go back to ESET, go to settings, security settings, advanced, modify exclusions, add exclusion, paste the file path... Yeah, I can, but it's long. Also, if a real malware infects the file, it won't be flagged by the antivirus as it doesn't care about exclued files being modified. Also I wonder why older versions worked and this one doesn't. Is it a feature that have been added and that looks like what malware would do ?

Fresta56 commented 2 months ago

Antivirus programs show viruses in the program, such as Norton. Is it false? I scanned the Virus Total program and it also shows dangerous viruses. https://www.virustotal.com/gui/file/03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8/detection/f-03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8-1726443725 What does the program developer say?

EJSnow commented 2 months ago

I think it's false detections. I took the risk of downloading this program, and while AVG (my anti-malware of choice) immediately flagged the file as a PUP when it finished downloading, I created an exception and it worked fine and as far as I'm aware didn't do anything malicious. I noticed that some AVs on VirusTotal claimed it was a trojan though... I think the reason why it's being flagged is because some of what it does seems very similar (to an anti-malware program) to what actually malicious software would do and they don't have much data on this program yet, since it's a fairly small GitHub project.

(I am not the developer of this program, just another user, and I'm just reporting what I've observed.)

HGStyle commented 2 months ago

Antivirus programs show viruses in the program, such as Norton. Is it false? I scanned the Virus Total program and it also shows dangerous viruses. https://www.virustotal.com/gui/file/03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8/detection/f-03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8-1726443725 What does the program developer say?

Always used the software, always worked and did what it reported to do. I'm sure it's detected because it turns on and off Windows features like Windows Defender, just like a malware would attempt to, so it's surely false detections.