Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows Defender Detection #548

Open
marcfielding1 opened this issue Jan 27, 2025 · 3 comments
Open

Windows Defender Detection #548

marcfielding1 opened this issue Jan 27, 2025 · 3 comments

Comments

@marcfielding1
Copy link

Just a note - Windows defender just started detecting this tool as Trojan:Win32/Wacatac.H!ml

@marcfielding1 marcfielding1 changed the title Windows Defender Windows Defender Detection Jan 27, 2025
@talrus
Copy link

talrus commented Jan 27, 2025

Today started marking this file as Trojan:Win32/Yomal!rfn

@Triky313
Copy link
Owner

Currently some of you seem to have problems with virus or Trojan messages.

Why is that?

There can be various reasons for this.

  • Signature change in the antivirus database
  • Heuristic analysis: Tools with unusual behavior, e.g. access to files, network communication, or the use of certain APIs.
  • False alarms
  • Compression or packing
  • Missing code signature
    To name just a few.

The last changes I made were the following:
3ede20c
After that there was only the version update, so you can all get the update automatically.

VirusTotal unfortunately also shows some hits, which was never the case before:
https://www.virustotal.com/gui/file/0b878417717f2ffbab14b7ccb9325e234f63750d5c1f2e081459db21d5ecc497
In addition, the pre-release update URL, which is located directly at github, seems to have been reported, which is also not good. However, there is no Trojan or virus in the file itself.
https://raw.githubusercontent.com/Triky313/AlbionOnline-StatisticsAnalysis/main/src/StatisticsAnalysisTool/ao-pre-release-update-check.xml

From my side, I can tell you that under no circumstances will I install viruses or other shady software in the tool, ever.

If some people are still not sure, there is currently no other option than to avoid the tool.

For those who want to continue using the tool, the tool must be allowed in the AntiVirus program. Preferably on a whitelist.
This is different for every anti-virus program, so I can't give you an exact description.

I have now also published a new version without any changes in the hope that the problem will go away.
https://github.com/Triky313/AlbionOnline-StatisticsAnalysis/releases/tag/v8.0.4

Sorry for the inconvenience, but unfortunately this is sometimes unavoidable. :sat:

@marcfielding1
Copy link
Author

Heya, yeah I understand I've had this previously with some windows software also - it's no biggie I was just flagging it. Microsoft does provide tools although I've never used them personally, starting here: https://www.microsoft.com/en-us/wdsi/filesubmission

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants