[Bug Report] Flagged by windows security

[carcour]

Problem

Latest version (7.1.4) gets flagged as malware by windows security and can't be executed, not even as admin. Same issue with SpotiDownloader. Is it something to do with the fact that it's a zip file now and not .exe?

Type

Album

Spotify URL

https://open.spotify.com/album/4uG8q3GPuWHQlRbswMIRS6?si=K-Wwsd-WTSSkcqsMgjDTgQ

Additional Context

Spotify link was required, nothing to do with the issue.

SpotiFLAC Version

v7.1.4

OS

Windows 11

Location

Norway

[staspiszcz-eng]

I cannot even download it from any chromium browser

[bluem-dev]

Problem

Latest version (7.1.4) gets flagged as malware by windows security and can't be executed, not even as admin. Same issue with SpotiDownloader. Is it something to do with the fact that it's a zip file now and not .exe?

Type

Album

Spotify URL

https://open.spotify.com/album/4uG8q3GPuWHQlRbswMIRS6?si=K-Wwsd-WTSSkcqsMgjDTgQ

Additional Context

Spotify link was required, nothing to do with the issue.

SpotiFLAC Version

v7.1.4

OS

Windows 11

Location

Norway

These are false positives.

https://learn.microsoft.com/es-es/answers/questions/3792241/falso-positivo-en-virustotal-(w-32-aldetect-malwar

https://www.reddit.com/r/antivirus/comments/wbbfrb/what_does_wingrayware_confidence_70d_mean/

One reason is that the creator of “Spoti” compresses the final binaries with UPX; any file compressed with that tool triggers antivirus alerts.

[mjb2010]

Every time this is reported, it's treated as fixed and gets closed without comment.

There is a FAQ about it on the project home page. It says "Why does Windows Defender or antivirus flag or delete the file? This is a false positive. It likely happens because the executable is compressed using UPX. If you are concerned, you can fork the repository and build the software yourself from source."

So, it sounds like the developer is aware of the issue and does not intend to do anything about it.

A workaround is to set up a folder which is excluded from virus scanning, download the .zip to that folder, unzip it there, and then (you will need the command-line app UPX), run upx -d SpotiFLAC.exe. Now you can move the .exe elsewhere so it can be scanned and run safely.

[aureq]

For what it's worth, I've unpacked the .exe and some positive detection remain, same as for the behavior analysis.

[afkarxyz]

You’ll have to resolve this yourself by excluding it in your antivirus settings. For more information, please refer to the FAQ in the readme.

[mahoganyprogrammer]

@aureq just build from source. https://www.virustotal.com/gui/file/d4d1851a477e5962f31a950479306ecd5bb915642b024223f5a27a0e920af59b?nocache=1 see normal build is harmless.
install go runtime
install nodejs
go install github.com/wailsapp/wails/v2/cmd/wails@latest
in nodejs folder copy npm.cmd and rename to pnpm.cmd
in folder with source code,in addressbar type cmd ,press enter on keyboard
type wails build
and you have exe