Team-comtress-2: Windows Defender automatically quarantines tier0.dll

[woow101]

Description

Windows Defender quarantined tier0.dll, citing it to be a Trojan with the name "Win32/Azden.A!cl". Using "Learn more" opens to this malware description. I am fairly sure this is less of a bug and more of a Windows Defender mess up.

Checklist

• [x] None of the open or closed issues document this problem.

Screenshots

[Yttrium-tYcLief]

this sort of thing has been discussed in discord repeatedly; it's most likely just a heuristic detection, because it sees a modified version of a file that differs from the one that 99% of users have, so it flags it as suspicious and its default behavior towards suspicious files is to call them malicious. This is a common problem in the development world, and unfortunately there's not much we can do about it besides submit the file to Microsoft so that it gets certified as clean and doesn't get flagged again, which we've already done, but they're being awfully slow about it.

I'm going to leave this issue open so others can see it and not make duplicate issues, at least until we hear back from MS.

[joshuadinada]

this sort of thing has been discussed in discord repeatedly; it's most likely just a heuristic detection, because it sees a modified version of a file that differs from the one that 99% of users have, so it flags it as suspicious and its default behavior towards suspicious files is to call them malicious. This is a common problem in the development world, and unfortunately there's not much we can do about it besides submit the file to Microsoft so that it gets certified as clean and doesn't get flagged again, which we've already done, but they're being awfully slow about it.

I'm going to leave this issue open so others can see it and not make duplicate issues, at least until we hear back from MS.

I mean, at least mention this in the installation guide so newcomers don't panic

[Yttrium-tYcLief]

I'll look into improving documentation tomorrow.

[henke37]

I hear that signing the files help with their reputation. And Valve sign everything they ship.

[UntouchedOdin0]

You can report the false report here I hope this helps. It might take a while for it to get checked over.