Archisteamfarm: ASF detected as a virus by Windows Defender

[TXIDRIVR]

Hello,

First at all, thanks a lot for this marvelous app!

Here is my issue : Windows Defender now detect ASF as a virus (since today), and remove it.

It happened with ArchiSteamFarm V2.3.1.8.

Here is the Windows Defender report :

The following error occurred: Error code: 0x80508023. The program did not find any malicious software or other potentially dangerous software on this computer.

Category: Password sniffer program

Description: This program is dangerous and captures the passwords of users.

Recommended Action: Remove this software immediately.

elements:
containerfile: C: \ Users \ Thomas \ Downloads \ ASF.zip
file: C: \ Users \ Thomas \ Downloads \ ASF.zip-> ASF.exe
WebFile: C: \ Users \ Thomas \ Downloads \ ASF.zip | https: //github-production-release-asset-2e65be.s3.amazonaws.com/44897462/4a972476-4ee2-11e7-9e83-229d71f86a1b X-Amz? -Algorithm = AWS4-HMAC-SHA256 & X-Amz-Credential = AKIAIWNJYAX4CSVEH53A% 2F20170613% 2Fus-east-1% 2Fs3% 2Faws4_request & X-Amz-date = 20170613T175523Z & X-Amz-Expires = 300 & X-Amz-Signature = 35253cff0528c71e982b0c11940ef2e189b6afc96a798116ef4c00a5ef9c6973 & X-Amz-SignedHeaders = host & actor_id = 0 & response-content-disposition = attachment% 3B% 20filename% 3DASF.zip & response-content-type = application% 2Foctet stream | opera.exe

I saw that there is an issue ticket for Panda Antivirus, and I saw the response...

But now, it's for Windows Defender. I'm saying nothing, but if you consider that it might be the most installed antivirus, you may consider to fix this issue.

Again, thanks a lot for your work.

[JustArchi]

Please review the guidelines for contributing to this repository.

https://github.com/JustArchi/ArchiSteamFarm/blob/master/CONTRIBUTING.md

If my issue is not meeting contributing guidelines specified above, especially if it's a question or technical issue, please close my issue immediately - I won't complain.

Reason for closing: not a bug, explained in the FAQ.

[navossoc]

Let me add something to this discussion...

This problem starts to happens on this commit: f7e0fca199d6e9f6a7483042a890e23dfb47013d
Seems that when you have bumped the protobuf version, the problem just appeared.

Sure it is just a false positive, but, maybe it worth the look?

You can the same commit here, but protobuf reverted to 2.2.0
https://github.com/JustArchi/ArchiSteamFarm/compare/f7e0fca199d6e9f6a7483042a890e23dfb47013d...navossoc:2.3.1.6-no-virus

[]'s

[MaduRUDE]

it's fixed now anyway by MS, no need to

[navossoc]

@MaduRUDE I think they just whitelisted it, so that means that exactly build is "fixed"...

If you try to build the source, you will get the same false positive again.
Which is something really annoying, so on every update it will be needed to send to Microsoft for analysis.

Yeah, it is their fault (M$), but I don't think they care at all.

[MaduRUDE]

it was not a problem with ASF, only MS decided to mark it, so there's nothing to fix really

[navossoc]

And who said it was ASF fault? I'll wait for @JustArchi to take a look.
If he does not think it pays to try to find the false positive. Okay, I'm done.

[JustArchi]

I have better stuff to do than fixing third-party fuckups, so no, I won't spend any minute trying to out-smart broken third-party software and fix anything else than my own program. Since ASF doesn't have any virus, there is nothing to fix, and if you expect me to intentionally downgrade functionality of my own program only because some AV is horribly broken then you're in the wrong place.