msasanmh / SecureDNSClient

A DNS Client Supporting DNSCrypt, Anonymized DNSCrypt, DoH, DoT, UDP And TCP.
https://msasanmh.github.io/SecureDNSClient/
GNU General Public License v3.0
778 stars 78 forks source link

Security Alert: Malware detection 3.0.4 #181

Closed khak313 closed 4 weeks ago

khak313 commented 1 month ago

Antivirus programs are identifying version 3.0.4 as a potential malware downloader and installer. Here are some of the reports:

https://opentip.kaspersky.com/C4673993120C2D8A5E7290BD9D8B4BAD853007006ACEDB5FDC4E5BACEED1CBE4/results?tab=upload

https://gridinsoft.com/online-virus-scanner/id/c4673993120c2d8a5e7290bd9d8b4bad853007006acedb5fdc4e5baceed1cbe4

TheRealNE0 commented 1 month ago

@khak313

https://github.com/msasanmh/SecureDNSClient/tree/v3.0.0#:~:text=Secure%20DNS%20Client-,Note%3A%20some%20antivirus%20apps%20raise%20alert%20as%20PUA%20(Potentially%20Unwanted%20Application)%20for%20WinDivert%20which%20is%20used%20by%20GoodbyeDPI.%20If%20your%20antivirus%20detects%20WinDivert%20as%20a%20threat%2C%20add%20it%20to%20your%20exclusion%20list%20to%20ensure%20SDC%20functions%20as%20expected.,-Help%20(How%20to

msasanmh commented 1 month ago

Antivirus programs are identifying version 3.0.4 as a potential malware downloader and installer. Here are some of the reports:

https://opentip.kaspersky.com/C4673993120C2D8A5E7290BD9D8B4BAD853007006ACEDB5FDC4E5BACEED1CBE4/results?tab=upload

https://gridinsoft.com/online-virus-scanner/id/c4673993120c2d8a5e7290bd9d8b4bad853007006acedb5fdc4e5baceed1cbe4

Downloader: This app downloads a text file which contains information about the new version, so in order to check for a new app version I need to download a text file.

Also in next version app will download built-in servers from github, by this way I can update them remotely.

This app is open source and what you see is called false positive. Any C# programmer can confirm it by reading the source.