Releases being flagged as malware

[drxrell]

Windows defender and browser both flagged the AuthPatcher as being a virus, and windows specified a trojan. Maybe someone has a solid answer or method for me to check for sure?

[gehhoo]

i get the same results, most definitely a trojan

[leylani70]

I followed the instructions of use in the source code's README's, and it gave me binaries that Virustotal did not flag for viruses (At least, from what I remember). You can download my build at thefork here
[redacted]
Enjoy ;), but still check with Virustotal anyway because you could never be too safe...

[yossi99]

Please read this!!

It's a false positive detection. All the source code is available and you can check everything. The binaries in the releases are using a GitHub CI feature that grabs the code from the REPO, compiles it, and creates a ZIP of it. Source

Why is it flagging it as a Trojan?

Dotnet released a new way of compiling code that allows us to compile .NET code to native code, which means that you don't need the .NET runtime, and everything is shipped in a single executable (".EXE"). The problem is that some antivirus programs don't like these executables because they have custom sections on the PE that could indicate obfuscation or custom compilers (that's my guess). I'm sorry to hear that people are having trouble and doubts about the security of this project, but I'm trying to be as transparent as possible. It's a good thing, though, that people don't trust random people and random code, but that's why this is OPEN SOURCE.

Open source doesn't mean that it is safe, btw, you need to be able to understand the code and be careful when opening VS solutions because the .sln file can contain malware inside in the pré or pós build events.

You can check this issue where It have explained this before
#14 (comment)

[yossi99]

I followed the instructions of use in the source code's README's, and it gave me binaries that Virustotal did not flag for viruses (At least, from what I remember). You can download my build at thefork here https://github.com/leylani70/HeatGame/releases/ Enjoy ;), but still check with Virustotal anyway because you could never be too safe...

This is just shifting the trust from me to you. I can't trust what you just sent either. So this is kind of pointless if you don't know how to read the code. I strongly recommend that you learn new things and be free; knowledge is freedom

I'm open to any questions in the regards of the security and trustworthiness of this project