Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Windows Defender thinks paket 5.151.3 is a trojan

See original GitHub issue

Description

I started having issues fetching paket.exe through paket.bootstrapper.exe. When the bootstrapper tries to fetch paket.exe, windows defender removes the file, and claims that the file contains the trojan “Win32/Critet.BS”.

Repro steps

Please provide the steps required to reproduce the problem

Step A Run bootstrapper on a machine with Windows Defender.

If possible then please create a git repository with a repro sample or attach a zip to the issue.

Expected behavior

No virus alert - paket.exe is downloaded.

Actual behavior

Virus alert - paket.exe is deleted

Known workarounds

Run paket.bootstrapper.exe 5.151.2

Issue Analytics

State:
Created 6 years ago
Reactions:3
Comments:17 (15 by maintainers)

Top GitHub Comments

5reactions

forkicommented, Mar 15, 2018

lol. So if I’d ever develop a real virus, then all I need to do is adding a comment somewhere to change the hash of the exe!? WTF!

0reactions

TheAngryByrdcommented, Mar 16, 2018

Had some contacts get in touch. This was their response.

found the signature author, will let you know. PS you don’t need to know somebody https://www.microsoft.com/en-us/wdsi/filesubmission those are monitored 24/7 should be good now