virus detected in latest lwjgl.zip download by ms edge

[goofyseeker311]

Version

3.3.4

Platform

Windows x64

JDK

oracle openjdk 22

Module

lwjgl core

Bug description

ms edge browser claims there is a virus on the main 300mb download package.
verify that its not the case and if ms edge has marked the file without reason.
custom zip files from the main website do not give that warning with same browser.
maybe check if the github redistributable everything file has problems.

Stacktrace or crash log output

ms edge does not tell much more than virus detected.
windows security says the file contains: Trojan:Win32/Vigorf.A

[goofyseeker311]

not even turning ms defender smartscreen off in the ms edge browser settings changes that, still says virus detected.

[Daedelus1]

MS Defender detected multiple files it labeled a Trojan when I attempted to unzip the file.

[Spasi]

Hey @goofyseeker311 @Daedelus1,

I've been trying to figure out what is going on and I've also asked people from LWJGL's discord server to help. So far, there hasn't been any evidence that these are real infections. Something appears to be triggering false positives, with the most likely reason being the switch to compilation with clang-cl (i.e. Visual Studio's Clang/LLVM compiler for Windows) in 3.3.4. Another oddity is that most detections happen with the x86 binaries, much fewer with the x64 ones.

This is of course a very serious matter and investigation is ongoing. If anyone can help and/or has information to share, please contact me directly (preferably on Discord).

For now, I have the removed the offending zip file from the Github release. You can find the same file, as well as the individual dlls from the LWJGL website: https://www.lwjgl.org/browse/release/3.3.4

[goofyseeker311]

same for the main site latest releases lwjgl.zip and lwjgl-3.3.4.zip, virus detected by edge/windows defender, only the custom packages pass. just to be aware that this happens, I will only use the custom packages that are not detected. not risking it.

these urls are complained by edge/msdefender:
https://build.lwjgl.org/release/latest/lwjgl.zip
https://build.lwjgl.org/release/3.3.4/lwjgl-3.3.4.zip

[JakeTheDondorian]

I've had multiply problems out of the blue recently with windows defender, which seems to have gone haywire. They're probably experimenting with some AI stuff.

First I got false-flag malware in the documentation html files of lwjgl, claimed to me android multiverse. I removed those from my jar and was fine for a bit. Now microsoft has renewed their efforts and lwjgl.dll is a Trojan.

I have a game called Songs of Syx, which has some windows players, so I can quickly and easily test tweaks. I'll join the discord now as "jake" in case I can be of service.

[goofyseeker311]

I still dont have any issues with windows defender with the custom download lwjgl package. including all the dlls and other files. maybe something is going on with the distribution packages specifically.

[donotfuckme]

came across with the same issue with my gradle project during gradle build command

FAILURE: Build failed with an exception.

What went wrong:
Execution failed for task ':desktop:compileJava'.

Could not resolve all files for configuration ':desktop:compileClasspath'.
Could not download lwjgl-3.3.4-natives-windows-x86.jar (org.lwjgl:lwjgl:3.3.4)
Could not get resource 'https://repo.maven.apache.org/maven2/org/lwjgl/lwjgl/3.3.4/lwjgl-3.3.4-natives-windows-x86.jar'.
java.io.FileNotFoundException: C:\Users\user.gradle.tmp\gradle_download8543268596508239190bin (Operation did not complete successfully because the file contains a virus or potentially unwanted software)

OS: Windows 11 Pro x64
Version: 23H2
OS build: 22631.4460
Java: corretto 1.8.0_432