Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

False Positive Warning on Win10 #2

Closed
Linkinsoldier opened this issue Jul 4, 2020 · 5 comments
Closed

False Positive Warning on Win10 #2

Linkinsoldier opened this issue Jul 4, 2020 · 5 comments

Comments

@Linkinsoldier
Copy link

When trying to open the .exe to patch my EE Installation, I get the following false positive:

False Positiv - trotzdem ausführbar

Can this be fixed?

@HerMajestyDrMona
Copy link

HerMajestyDrMona commented Jul 4, 2020

Hi Linkinsoldier.
SmartScreen alerts are normal. It means that the program is "unknown", "unrecognized", "not popular" (has not many active users).
I've wrote a little longer explanation here: https://forum.ee2.eu/viewtopic.php?p=25628#p25628 when a similar problem was reported in unofficial patch for EE2 topic.

Can this be fixed?

You're supposed to click "More information" (Weitere informationen) hyperlink. Then a "Run anway" button will appear.

@Linkinsoldier
Copy link
Author

Sorry, I should have been more precise: going around it was not the problem - i was just pointing out the false positive, so it might get fixed. Same goes for the virus total false positive:
https://www.virustotal.com/gui/file/e3ff445283018fbcfdd9b0c903443cf1e3559a2092d115617373f4d4c2c4a6ef/detection

@HerMajestyDrMona
Copy link

Still, the compiled executable has a low popularity. Therefore SmartScreen alerts users that it might be potentially dangerous. It happens to all new programs downloaded from the Internet.
False Positives on VirusTotal: "SecureAge APEX" and "VBA32"... First time hearing those names. Why should it even matter?

If you really want to get it "fixed", then:
https://www.secureaplus.com/features/antivirus/report-false-positive/
https://twitter.com/seeingwithsound/status/300633422286708736

Please remember that "EmpireEarthZoomChanger" modifies the game process memory at certain addresses. It's kind of "hacking", so sooner or later more AV programs might find it suspicious. This really should not be an issue, especially for an open source software like this. Everyone interested can view the source code and compile themselves.

@Linkinsoldier
Copy link
Author

Linkinsoldier commented Jul 5, 2020

Thank you - i did report it. Hope it will get fixed from the AV developers.

I was only curious because version 1.0 of the tool doesnt get any false positives:
https://www.virustotal.com/gui/file/75a765905a8484ad709c04fe27d4f4dbf13562e6174623dc7f943a558f3cae22/detection

So some of those changes seem to trigger the alarm:
1daf670

@Linkinsoldier
Copy link
Author

VBA32 wrote back, that the false positive will be removed with the next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants