wixsharp icon indicating copy to clipboard operation
wixsharp copied to clipboard

Win 11 defender assumes malware in WixSharp.dll

Open adrian0b opened this issue 2 months ago • 1 comments

Hi All,

I really don't know what changes lead to this error. If it was the Win11 Upgrade or something else. My build used to work without any issues, but now Windows Defender quarantaines a couple of files during build:

  • SimpleUpdater Installer.exe (my installer)
  • WixSharp.UI.WPF.dll
  • WixSharp.UI.dll
  • WixSharp.dll

Does anyone know anything about that problem?

Thank You!

Adriano

adrian0b avatar Oct 29 '25 15:10 adrian0b

Windows Defender is known for being very high on false positives. Sometimes it does it simply for a given file being downloaded (while the same file being created locally is OK).

Nothing we can do about it but just wait till WinDefender learns to trust this file.

BTW, it is a very big problem for WinGet team. In my experience, every single time I publish any application there it gets marked as invested 100% times. And the maintainers (also a MS team) says: "Nothing we can do, let's just wait". And 2-3 days later the app passes the AV check without me even resubmitting it. But once it blocked the release forever, and only the next release got published.

But just for people to be confident, I supplied the link to the VirusTotal check that downloads the published NuGet package and checks it. Check it on the Release page: https://github.com/oleg-shilo/wixsharp/releases/tag/v2.9.0.0

Image

oleg-shilo avatar Oct 30 '25 09:10 oleg-shilo