Just tried to download the Monogame 3.5 installer for visual studio (http://www.monogame.net/releases/v3.5/MonoGameSetup.exe)
As soon as it has finished downloading Windows Defender for windows 10 deletes it with the following message:
Category: Trojan
Description: This program is dangerous and executes commands from an attacker.
Recommended action: Remove this software immediately.
Items: file: D:\Files\Downloads\MonoGameSetup(1).exe
Get more information about this item online.
Any ideas why this might be?
Is this a false positive or has someone played around with the download mirror?
I just did a fresh download and a scan with windows defender from windows 10, no malware detected.
Hmm, I just did too, same result. It gets removed right away with the same message as before.
This is the first time WD has reported any virus (newly installed pc since 4 weeks ago).
Tried sending it to a few antivirus online scanners (metadefender.com among others) and they all claim it is safe too… wonder what windows defender is really reacting to.
This looks to be a common case of false positives… it happens to a lot of open source projects:
You can report it to MS and they could fix it in the next update to their virus scanner:
https://www.microsoft.com/security/portal/mmpc/developer/resources.aspx
I also plan to start signing our installers soon which should make things overall safer and solve this issue for good.
