Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows installer flagged by Windows Defender #108

Closed
EZ64cool opened this issue Dec 11, 2023 · 1 comment
Closed

Windows installer flagged by Windows Defender #108

EZ64cool opened this issue Dec 11, 2023 · 1 comment

Comments

@EZ64cool
Copy link
Contributor

EZ64cool commented Dec 11, 2023

Operating System Info

Windows 10

Other OS

No response

OBS Studio Version

30.0.0

OBS Studio Version (Other)

No response

OBS Studio Log URL

NA

OBS Studio Crash Log URL

No response

Expected Behavior

The windows installer shouldn't be flagged as a trojan

Current Behavior

Windows Defender currently flags the "*-windows-x64-Installer.exe" as a Trojan:Win32/OffLoader!MTB and promptly deletes the file.

Steps to Reproduce

  1. Create a release using tags
  2. Download the created "*-windows-x64-Installer.exe"
  3. Scan with windows defender
    ...

Anything else we should know?

This wasn't happening before I merged with latest.
EZ64cool/obs-hadowplay#9

@PatTheMav
Copy link
Member

Our working theory is that this is due to lots of malware using an almost-default InnoSetup configuration (much like we do for the plugin template) and as such generated installers run afoul of heuristics checks.

There is really not much we can do about that (except for developers to report false positives for their installers to Microsoft, though that's admittedly quite annoying).

If somebody wants to replace InnoSetup with NSIS (in the hopes that it generates less false positives) we'd probably be open to review/merge it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants