[OS: Windows] Windows defender detects the .exe as a Trojan:Win32/Emali.A!cl (False positive)

[spirit986]

I wanted to try your crossover program but the Windows Defender stops the download.

This was the information presented:

Trojan:Win32/Emali.A!cl https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aWin32%2fEmali.A!cl&threatid=2147728322

[peachy-keen]

I got the same thing :( I was able to download it by turning off windows defender

[lacymorrow]

Oh no! This hasn’t happened yet so I’m going to need to do a full code to see what the issue, it should be a few days.

Were you using the 1.3.2 version?

[khidir-o]

Same here, using 1.3.2

webfile: C:\Users\k\Downloads\CrossOver.exe|https://github-releases.githubusercontent.com/212880382/7de75780-db72-11eb-9ce7-9902c8a7557e?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210705%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210705T075424Z&X-Amz-Expires=300&X-Amz-Signature=c100adea196a980b48ed11a0f1991c5377454a5d64dec218af07022b998ee62a&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=212880382&response-content-disposition=attachment%3B%20filename%3DCrossOver.exe&response-content-type=application%2Foctet-stream|pid:21064,ProcessStart:132699452800353948

edit: Portable version seems to run fine though on Win 10.

[lacymorrow]

Seems like this is not uncommon for electron apps: https://github.com/electron/electron/issues/4485

I can't reproduce the error using the 1.3.2 CrossOver.exe though, so maybe not everyone is experiencing? I'll just have to recommend the portable for now.

[lacymorrow]

Is anyone still seeing these errors?

[khidir-o]

Is anyone still seeing these errors?

Just downloaded 2.1.1 and Defender didn't throw up anything.

[lacymorrow]

I'm going to wait on 3 successful installs to call this 'fixed'. I submitted this program to microsoft directly and they (hopefully) have whitelisted it.

To be clear, CrossOver is not malware and does not contain any malicious code. I would know, I wrote it.

[lacymorrow]

Since I've heard no other reports, I'm going to close this.

[Rigner]

Hey, just reporting I got that error while downloading the latest portable build

[lacymorrow]

Thanks @PSNRigner , I've re-submitted to microsoft, hopefully it gets un-flagged.