Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Microsoft Defender warning latest build #8

Closed
lordunix opened this issue Aug 26, 2023 · 1 comment
Closed

Microsoft Defender warning latest build #8

lordunix opened this issue Aug 26, 2023 · 1 comment

Comments

@lordunix
Copy link

Latest build raises Microsoft Defender warning with:

Trojan:Win32/Wacatac.B!ml

@trholding
Copy link
Owner

Thank you for bringing this to my attention. This is a known issue:

jart/cosmopolitan#342

The warning happens only with cosmocc builds and it is a false positive.

Basically with cosmocc builds, the same binary works for all OSes, antivirus and virustotal misinterpret that as a signature of viruses.

This can go away only if we or upstream purchases expensive code signing certificates from microsoft. The warning is actually generated and put int AV databases by Microsoft, as part of Windows Smartscreen to discourage unsigned executables.

You can use the tools mentioned in the thread to inspect and also if people want to see portable binaries from indie developers like us, then users could go to various Antivirus contact forms or even add Virus Total comments and mark ours as false positive.

On the other hand this is a open source project, you can audit each line of code and build non portable binaries or normal binaries yourself by cloning this project and following instructions.

However even the self compiled portable cosmocc binaries will fail the virus total check due to false positive. Normal binaries don't face that problem.

I'll add a note about this issue in the project description in the next commit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants