search

satisfactorymodding / SatisfactoryModManager

A mod manager for easy installation of mods and modloader for Satisfactory
GNU General Public License v3.0
378 stars 78 forks source link

False Positive - "Smart screen" prevents opening of installer. #53

Open Sakata-MC opened 4 years ago

Sakata-MC commented 4 years ago

Hey there. Looks like you have executable compression turned on and it's throwing Windows "Smart screen" service for a spin. Not a huge issue, but figure you'd like to know before you're inundated with a million messages about it. Looks like its the usual culprit of 'panic, I can't read your executable', also detected by some startup AV "Bkav" https://www.virustotal.com/gui/file/9f927f694dd7e866043a3e9c7d9d087df329cbfb1253b4c1984a173b9ecf276c/detection

Yelled at MS, not sure if it'll help since they don't listen to people as evidenced by 2004 version of windows...

mircearoata commented 4 years ago

We know about this, it has been happening since the very beginning because the app isn't signed with a $300/year certificate (yes, there probably are cheaper ones, but even then, there will be official mod support at some point so the app won't be used anymore). Some people did ask about this, but they understood that getting a certificate is too much trouble for something that might not even live that long

There used to be another one on virustotal that said "yep, it's an installer", but looks like it finally understood that installer != virus

Talking to Microsoft won't do anything, because SmartScreen is behaving as intended, warning that the app is not signed, so it could have been modified. But as long as it is downloaded from here or the direct download link (https://smm.ficsit.app) it is fine

For now the only thing we can do is have the SmartScreen steps in the install instructions, which we already have (on the discord)

Rosuav commented 3 years ago

Is it possible to use a LetsEncrypt certificate? They don't cost any money. With web browsers, they're fully accepted (example: see https://sikorsky.rosuav.com/ which is secured that way), but I don't know what Windows looks for.