Windows defender threat found.

[OMGJJ]

When starting ASF today I get this text:

2017-06-13 09:54:57|ASF-9576|INFO|ASF|InitASF() ASF V2.3.1.4
2017-06-13 09:54:57|ASF-9576|INFO|ASF|IsRuntimeSupported() Your .NET runtime version is OK.
2017-06-13 09:54:57|ASF-9576|INFO|ASF|IsRuntimeSupported() Required version: 4.6.1 | Found version: 4.7
2017-06-13 09:54:58|ASF-9576|INFO|ASF|CheckForUpdate() ASF will automatically check for new versions every 1 day.
2017-06-13 09:54:58|ASF-9576|INFO|ASF|CheckForUpdate() Checking for new version...
2017-06-13 09:54:58|ASF-9576|INFO|ASF|CheckForUpdate() Local version: 2.3.1.4 | Remote version: 2.3.1.8
2017-06-13 09:54:58|ASF-9576|INFO|ASF|CheckForUpdate() Downloading new version... While waiting, consider donating if you appreciate the work being done! :)
2017-06-13 09:55:01|ASF-9576|ERROR|ASF|CheckForUpdate() System.IO.IOException: Operation did not complete successfully because the file contains a virus or potentially unwanted software.

at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.File.InternalMove(String sourceFileName, String destFileName, Boolean checkHost)
at ArchiSteamFarm.ASF.<CheckForUpdate>d__5.MoveNext()

At the same time Windows Defender says it found a threat and if I clear the threat ASF.exe is deleted.

Miyuu EDIT: Any new threads regarding this will result in immediate 3-day ban.

[Yuu]

Why are you worried about Windows Defender anyways? Never heard of a single time in history when it caught something that was both accurate and important.

Anyways, add an exclusion as long as you got ASF from the official GitHub, I doubt reporting it to Microsoft will actually do anything. As long asd you always obtain it from the official GitHub it's always a false positive.

You should really install an actual anti-virus though if you're worried about stuff, because Windows Defender doesn't do much of anything, and an actual AV will disable it entirely.

[ᑕOᑭYᗯᕼEEᒪ]

ArchiSteamFarm.dll coming up as trojan

https://www.virustotal.com/#/file/8ef581615890c939a51da1b3b5c6646735968b2b9df5cbefbc700c1243a5c983/detection

i was googling it, archi do you mind submitting it here https://www.microsoft.com/en-us/wdsi/filesubmission so then Microsoft stops marking it as trojan

[Yuu]

We've submitted it tons of times ourselves. Take a look at the wiki, add an exclusion, and send it to Microsoft if you care about it so much.

https://github.com/JustArchi/ArchiSteamFarm/wiki/FAQ#issues

[Miku]

Looks like it's time to pin this thread again.

[ᑕOᑭYᗯᕼEEᒪ]

ok sorry sheesh and i did submit it aswell i just thought the actual developer had to do it. i will look at the faq next time before i post.

[FíftýtríçKs.]

Anyone else getting severe Antivirus warnings when trying to open ASF last few hours? - Trojan

Something huge is going on with my ASF windows is picking up TROJANS no matter what version I switch to or what way I try to run or execute it, Is this happening for everyone atm just a Mistake by Devs? - I'm pretty advance user, Nothing has changed Since I last opened it an hour before the issue I simply make a new Bot with web config but that active/inactive on/off my PC makes no difference so it's not that

[Makam]

https://steamcommunity.com/groups/ascfarm/discussions/1/1353742967823505779/

[Miku]

Yes, everybody using Windows Defender is getting the same warning, refer to the stickied thread: https://steamcommunity.com/groups/ascfarm/discussions/1/1353742967823505779/

[FíftýtríçKs.]

Thank you I appreciate it very much! - I had absolutely zero doubt there was any foul play, but as a human being I see that & decide to check with the community only because I know how bad a line of coding can turn things from personal experience lol

[FíftýtríçKs.]

I really miss my Kaspersky total security, Windows doesn’t cut it.

[DraxxorT]

Fluffy Loli Miyuu の投稿を引用：

Why are you worried about Windows Defender anyways? Never heard of a single time in history when it caught something that was both accurate and important.

. . .

You should really install an actual anti-virus though if you're worried about stuff, because Windows Defender doesn't do much of anything, and an actual AV will disable it entirely.

That attitude is actually a bit out of date.

Robert Zak の投稿を引用：

As of April 2018, Windows Defender has scored 5.5 across the three categories. That technically gives it the same “Protection” and “Performance” ratings as antivirus giants like Avast and AVG. It’s worth noting that, at the time of writing, the only anti-virus software to get full marks across the board are AhnLab Internet Security and Avira.

. . .

Looking at the real-world protection tests, the results are again pretty good. AV Comparatives carried out its tests using a mix of malicious URLs, drive-by downloads, and URLs redirecting users to malware. Windows Defender had a 0% compromise rate, which was better than the 0.4% rates with Avast and AVG, and up there with the flawless scores of Avira, Bitdefender and McAfee.

Windows Defender even picked up the bronze award for false positives, coming in third place in terms of clocking up the least false detection of malware, which we probably all know from experience can cause a whole load of stress.

What Windows Defender didn’t do so well in (the worst out of all the tested antiviruses, in fact), was “user-dependent” malware. In 3.6% of malware instances, Windows Defender gives users the option to execute the malware rather than outright blocking it.

Source[www.maketecheasier.com], dated 7 June 2018

HowToGeek recommends supplementing Windows Defender with Malwarebytes[www.howtogeek.com], since that's where it's weakest, but other than that, you shouldn't really need a 3rd party AV.

[Ymetro]

Dude_47 の投稿を引用：

Trojan:Win32/Bluteal.B!rfn

Windows Defender told me so after last ASF update.

Same here in Dutch. Another false positive!

Edit: Uploaded ArchiSteamFarm.dll 3.2.0.2 to VirusTotal and only Microsoft and Rising (which I never heard of) out of the 67 different scan engines sees it as a threat.

Edit: The Windows Defender bugger stole the .dll file after I restored it and marked it as safe! Annoying! Had to restore it again. How to send MS a heads-up that this one is safe?

[Yuu]

DraxxorT の投稿を引用：

Fluffy Loli Miyuu の投稿を引用：

Why are you worried about Windows Defender anyways? Never heard of a single time in history when it caught something that was both accurate and important.

. . .

You should really install an actual anti-virus though if you're worried about stuff, because Windows Defender doesn't do much of anything, and an actual AV will disable it entirely.

That attitude is actually a bit out of date.

Robert Zak の投稿を引用：

As of April 2018, Windows Defender has scored 5.5 across the three categories. That technically gives it the same “Protection” and “Performance” ratings as antivirus giants like Avast and AVG. It’s worth noting that, at the time of writing, the only anti-virus software to get full marks across the board are AhnLab Internet Security and Avira.

. . .

Looking at the real-world protection tests, the results are again pretty good. AV Comparatives carried out its tests using a mix of malicious URLs, drive-by downloads, and URLs redirecting users to malware. Windows Defender had a 0% compromise rate, which was better than the 0.4% rates with Avast and AVG, and up there with the flawless scores of Avira, Bitdefender and McAfee.

Windows Defender even picked up the bronze award for false positives, coming in third place in terms of clocking up the least false detection of malware, which we probably all know from experience can cause a whole load of stress.

What Windows Defender didn’t do so well in (the worst out of all the tested antiviruses, in fact), was “user-dependent” malware. In 3.6% of malware instances, Windows Defender gives users the option to execute the malware rather than outright blocking it.

Source[www.maketecheasier.com], dated 7 June 2018

HowToGeek recommends supplementing Windows Defender with Malwarebytes[www.howtogeek.com], since that's where it's weakest, but other than that, you shouldn't really need a 3rd party AV.

*shrug* Guess so. Still, the first thing I do on every Windows 10 install is disable it, never really liked it much to begin with.

[Drughi14]

Miku の投稿を引用：

It's a well known false positive, happens quite often, since ASF does indeed send login info and passwords to Valve (like the official Steam client), so Windows Defender considers it malicious behaviour.

Of course, it's as safe as the Steam client itself.
And if you're skeptical you can take a look at the code since it's open source.

Add the ASF executable, or even the entire folder, to the exceptions.
Or consider using a better antivirus, since Windows Defender is only really good to have a vague sense of protection while you search for a proper antivirus - free versions are good enough for a home PC.

Thanks for the help,works fine for me!

[Jnx]

I'm getting the same thing as Dude_47.

https://i.imgur.com/bKvwMna.png