search

memospot / memos-builds

Builds for https://github.com/usememos/memos
MIT License
14 stars 2 forks source link

windows defender report trojan:scrpit threaten #78

Closed ruohai closed 1 month ago

ruohai commented 1 month ago

Describe the bug

windows defender on window 10 report trojan script threaten while download the memos-v0.17.1-linux-armv7l.tar.gz

Snipaste_2024-07-28_19-35-40 Snipaste_2024-07-28_19-35-52

Steps to reproduce

go to realease page and choose download the armv7l package , when it downlaoded my pc will report a torjan worm security alert。

Screenshots or additional context

No response

Issues-translate-bot commented 1 month ago

The issue is not in English. It has been translated automatically.

Title: windows defender report trojan:script threaten

lincolnthalles commented 1 month ago

Unless your machine has been tampered with, it's a false-positive. You can confirm that the tar file is unaltered by checking the sha256 hash against the memos_SHA256SUMS.txt file, available for each release.

Linux builds use UPX compression in the final build stage, which reduces the binary from ~46 to ~9 MB, but in return, that increases the false-positive rates, as stated in Notes.

Also, many antivirus software are known to flag files simply due to low circulation and lack of Code Signing Certificates, which are expensive to maintain.

You should submit any suspicious files to https://www.virustotal.com or https://virusscan.jotti.org, and worry only if several major vendors flag the file.

That very same file from memos-v0.17.1-linux-armv7l.tar.gz gets 2 flags in VirusTotal, but they go away after decompressing the file with `upx -d memos´, and the file gets marked as clean by 67 different AV software.