DrWeb Antivirus vs archisteamfarm.exe

[Desmond]

DrWeb Antivirus detects (and removed) archisteamfarm.exe as "Trojan.Encoder".
I guess it's most likely a false positive detect, but this is the first time in 6 years of use Archi-ASF, can you please check and make sure that no one else has intruded into the code? Thanks.

[Astaroth]

https://github.com/JustArchiNET/ArchiSteamFarm/wiki/FAQ#asf-is-being-detected-as-a-malware-by-my-antivirus-whats-going-on

[Archi]

As in above FAQ entry, if you expect official ASF team statement. Nothing changed in this regard since first false positive reported back in 2015.

Also I don't see it being reported by VirusTotal, so either they already fixed it or you're running some custom solution: https://www.virustotal.com/gui/file-analysis/ZDRiZTk3MjU0Y2MyMGNhNzZhMTY0NDFjZDk4MzBlZDk6MTcwMjY0NDQ1MQ==

[Desmond]

This comment is awaiting analysis by our automated content check system. It will be temporarily hidden until we verify that it does not contain harmful content (e.g. links to websites that attempt to steal information).

[Archi]

Originally posted by Desmond:

Originally posted by Archi:

Also I don't see it being reported by VirusTotal, so either they already fixed it or you're running some custom solution: https://www.virustotal.com/gui/file-analysis/ZDRiZTk3MjU0Y2MyMGNhNzZhMTY0NDFjZDk4MzBlZDk6MTcwMjY0NDQ1MQ==

https://www.virustotal.com/gui/file/7d89f5a56b0dff6cf7a697585886af00038e87651bc0de42d1a055d43437787a?nocache=1

The detection you linked relates to older ASF version, not the latest one, so using latest one should not cause you issues as per my analysis above.

Still, I checked your report, and MD5 sum matches which means this is official file from GitHub - which means it's false positive, and you should consider reporting it as per FAQ entry if you want to do something. There is nothing for us to do in regards to that.

[Desmond]

Originally posted by Archi:

The detection you linked relates to older ASF version, not the latest one, so using latest one should not cause you issues as per my analysis above.

Still, I checked your report, and MD5 sum matches which means this is official file from GitHub - which means it's false positive, and you should consider reporting it as per FAQ entry if you want to do something. There is nothing for us to do in regards to that.

Not as old version, because i updated in the previous week.
Well, it's good that it's a false positive alarm.
Thanks.