Question / Help Microsoft defender detected OBS as a virus legit

S

Sharkee

New Member
Hello

I am a long time user of OBS and I've never had any problems with the website.

Anyways, for a reason I had to reinstall Windows and I had my old OBS exe installer file but I decided I should get the new version, so I google OBS, I open the OBS website and I click the Windows button and IDM captures the download and it begins but after a few seconds I receive a notification from Windows defender about a threat.

It says it found a virus and on details it points to the download files of OBS:

Filename:
github-production-release-asset-2e65be_s3_amazonaws_com

Directory:
D:\IDM Temp\DwnlData\S\github-production-release-asset-2e65be_s3_amazonaws_com_22

I copied the download address and I'm going to post it here so you can inspects it:
https://github-production-release-asset-2e65be.s3.amazonaws.com/13233158/0ed189a8-5617-11e8-9eb2-8d79a82a24fd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A/20180729/us-east-1/s3/aws4_request&X-Amz-Date=20180729T174302Z&X-Amz-Expires=300&X-Amz-Signature=75328438e1ffddfaf9d67d75867f48232f9defac5725ecb4060305a31dbf75e3&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment; filename=OBS-Studio-21.1.2-Full-Installer.exe&response-content-type=application/octet-stream
 
Last edited:
S

Sharkee

New Member
Osiris said:
That first virustotal link wasn't even from any OBS file.
Click to expand...
No, seems you didn't get it. I was downloading with IDM (Internet Download Manager).

IDM splits the download into parts, and the first part was identified as virus.

I googled about "github-production-release-asset Virus" and it seems like Microsoft Defender and possibly some other trashy anti viruses like webroot have a bug that identify some downloads from github as virus.

Someone reported that they uploaded their github release somewhere other than github and then they downloaded it and they had no problem but when downloading from github it was identified as virus though files were identical SOURCE: https://github.com/authentic-theme/authentic-theme/issues/792#issuecomment-303312456

If OBS could provide another alternative link for distributing the releases, that'd be great.
If you need more info I'd be happy to help.
 
Last edited:
S

SJ_80 (Silvana)

New Member
Yes, is a virus, I downloaded it from the oficial page and just send me a trojan (a very bad virus). I uninstall roblox completely and no, I checked it and OBS studio is the problem, if you want to download this, don't do that, you will get a trojan or troyan (I don't know how to say it). This is a test of that:
Análisis completo del sistema 9_11_2021 13_19_57.png
 
S

SJ_80 (Silvana)

New Member
too is not an joke trojan/troyan, that trojan/troyan wanted to rob me some documents, and that delete one of my personal videos of fun :(.
 
You must log in or register to reply here.
Top