Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Launchpad-9.4.0.exe installer flagged as Program:Win32/Uwamson.A!ml by Windows Security/Defender #350

Open
FlaminSarge opened this issue Apr 26, 2022 · 3 comments

Comments

@FlaminSarge
Copy link

FlaminSarge commented Apr 26, 2022

Describe the bug
The installer's being flagged as potential malware on Win10, unsure if anything's changed but this only started happening recently.
In addition, VirusTotal also flags this file: https://www.virustotal.com/gui/file/32021bc83415772b217a5db312fc20df25185a4ab55b5d318af014bba57ec74f

To Reproduce
Steps to reproduce the behavior:

  1. Download Launchpad-9.4.0.exe from Github releases page
  2. Scan with Windows Security (right-click context menu option)
  3. File gets flagged as a PUP: Win32/Uwamson.A!ml

Expected behavior
This wasn't occurring prior to today.

Screenshots
If applicable, add screenshots to help explain your problem.

Required Details

  • Windows 10 64-bit 21H1
  • Launchpad Version 9.4.0

Additional context

@bmcclure
Copy link
Collaborator

bmcclure commented Jul 7, 2022

I built the installer myself and I am positive there is no malware in it. I'm not sure offhand if there is some way to prove that it's safe or not, but I've seen these warnings too on multiple Launchpad versions, and I think they are similar to this: https://www.autohotkey.com/boards/viewtopic.php?t=90504

@bmcclure
Copy link
Collaborator

bmcclure commented Jul 7, 2022

Based on those forum topics, I will see if I can submit the Launchpad installer as a false positive on my end. Anyone else getting these messages, it would be helpful if they could also submit the file to their antivirus provider as a false positive so they can hopefully eventually mark it as safe.

@bmcclure
Copy link
Collaborator

bmcclure commented Jul 7, 2022

One more thing, the fact that it just started showing up for you when you posted this makes me think that something changed on the Defender side of things to start marking it as malware, since there weren't any significant changes on the Launchpad side.

It seems virus scanners tend to not like AutoHotKey scripts, particularly when they are compiled into an .exe, and even more particularly when they're compressed into an installer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants