4.30 star(s) 14 Votes

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
And here is your answer. MS fucked up...again. :rolleyes:


The issue of Windows 10 flagging multiple files, including .exe files, as viruses since the September 9, 2025, cumulative update (KB5065429) is likely tied to Microsoft Defender Antivirus’s updated detection logic and signature definitions. Beyond the WinRing0 driver issue (flagged as "Trojan:Win32/Vigorf.A" due to CVE-2020-14979), the update appears to have broadened its threat detection parameters, leading to increased false positives for certain executable files, particularly those from less common or unsigned software, open-source tools, or older applications. Here’s a concise breakdown of why this is happening and how to address it:

Why Multiple Files (e.g., .exe) Are Being Flagged

  1. Stricter Heuristics: The September 2025 Defender update enhanced behavioral and signature-based detection to catch potential threats, including unsigned or obscure .exe files that resemble malicious patterns.
  2. Vulnerable Driver and Software Blocklist: Microsoft expanded its VulnerableDriver blocklist and similar protections, flagging not just drivers but also executables with outdated or exploitable code.
  3. False Positives: Legitimate software, especially niche tools or older programs, may trigger alerts if they use deprecated APIs, lack digital signatures, or match heuristic patterns for malware.
  4. Patch Tuesday Impact: The KB5065429 update, alongside Defender definition updates around September 4–9, 2025, tightened security, causing some safe .exe files to be misidentified.
Steps to Resolve

  1. Check Quarantine: Open Windows Security > Virus & Threat Protection > Protection History. Identify flagged .exe files. If from trusted sources, select "Restore."
  2. Add Exclusions: Navigate to Virus & Threat Protection > Manage Settings > Add or remove exclusions. Add specific .exe files or their folders to prevent future flagging. Be cautious, as exclusions reduce protection.
  3. Verify File Legitimacy: For unfamiliar .exe files, upload them to VirusTotal.com for multi-engine scanning or Microsoft’s Security Intelligence portal (security.microsoft.com/report) to report false positives.
  4. Update Software: Check for updates to affected programs. Developers may release patched versions to avoid Defender’s new rules (e.g., Fan Control’s GitHub discussions).
  5. System Update: Ensure Windows is fully updated via Settings > Update & Security > Windows Update to apply any follow-up fixes that refine detection.
  6. Secondary Scan: If unsure about a file, use a second-opinion scanner like Malwarebytes to confirm it’s not actual malware.
Additional Notes

  • No Widespread Malware Outbreak: This issue is primarily due to Defender’s aggressive tuning, not a surge in viruses.
  • Persistent Issues: If multiple legitimate .exe files keep getting flagged, consider temporarily disabling Defender’s real-time protection (Settings > Virus & Threat Protection > Manage Settings) while running trusted programs, then re-enable it. Alternatively, report recurring false positives to Microsoft for definition updates.
  • Context Matters: If the flagged files are from unknown sources or exhibit suspicious behavior (e.g., unexpected network activity), treat them as potential threats until verified.
Thanks! That makes sense. The game was available on my Patreon for a few weeks and I have not received a single complain about it.
 
  • Like
Reactions: StrawberryCheese83

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
Yeah, download is sus, I have tried pixeldrain and workload and my browser doesn't like it.
As I replied to some other posts, this looks like a false flag by Windows defender. If you manage to download it and scan it using VirusTotal, you'll confirm it's all green. Or you can use the "exe" file from another Renpy game you trust, renaming it to "AccordingToSofia.exe". If I find any other solutions/options, I'll post them here.
 

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
Can I download it or not?
It looks like Windows defender is falsely flagging the file as risky, but one you download it and scan it using VirusTotal, you'll see it's all green. And you can even use the "exe" file from another Renpy game you trust, by copy/paste it and rename it to "AccordingToSofia.exe".
 

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
Firefox don't like it either
All I can say is that it looks like a false flag raised by Windows defender. If you force the download and scan it using VirusTotal, you'll see it's all green. As an alternative, you can use the "exe" file from another Renpy game you trust, copy/paste it to the same folder of my game, rename it to "AccordingToSofia.exe" and try :)
 

Ferdinand321

Member
Jul 2, 2020
228
330
227
It's a pleasant surprise to learn that this game has a preventable NTR because the FMC is well-rendered and looks good, and I wouldn't touch this game myself if I were forced to cheat, but thanks to the preventable NTR, this is good. If this remains preventable after the next update, you have my support on Patreon.
 

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
you can do what ever you want, it's your pc...
I'm not downloading it.
Previous version of the game didn't raise any flags. If this one does, means the dev added more than just renders/animations/text.
I have not added anything to the zip file. It's a plain Renpy zip file. The issue seems to be related to Windows defender flagging the file as dangerous. But if you force the download and scan it using VirusTotal, you'll see it returns all green. And you can even use the "exe" file from another Renpy game you trust, just copy/paste it to the same folder of my game and rename it to "AccordingToSofia.exe".
 

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
Or the uploader, as has happened in previous threads.
As far as we can tell, neither myself nor any uploader did... It looks like Windows defender is flaging it as unsafe... But if you force the download and scan it using VirusTotal, you'll see it's all green.
 

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
unlucky virus warning, i was waiting for this update but not worth ofc
As StrawberryCheese83 shared earlier, it seems that Windows defender is flagging this file as unsafe, but if you force the download and scan it using VirusTotal, you'll confirm it's all green. You can also use the "exe" file from another Renpy game you trust (maybe even the previous version of my own game), copy/paste that into the new game's folder and try :)
 
Jun 1, 2017
410
359
325
As StrawberryCheese83 shared earlier, it seems that Windows defender is flagging this file as unsafe, but if you force the download and scan it using VirusTotal, you'll confirm it's all green. You can also use the "exe" file from another Renpy game you trust (maybe even the previous version of my own game), copy/paste that into the new game's folder and try :)
It's not about the archive itself, i scan with Bitdefender total security and with Malwarebytes and all clean. The problem its Chrome browser, how i say earlier if you download with Edge browser it's all fine. So, i don't think is something with Windows defender or any AV. For me that is how is worked i switch to edge and download. that's all.
 
  • Like
Reactions: grima_grima

TonyMurray

Conversation Conqueror
Apr 8, 2024
6,424
12,015
774
It's not about the archive itself, i scan with Bitdefender total security and with Malwarebytes and all clean. The problem its Chrome browser, how i say earlier if you download with Edge browser it's all fine. So, i don't think is something with Windows defender or any AV. For me that is how is worked i switch to edge and download. that's all.
There's some combination of factors going on with it. I use Chrome and it downloads fine, without the suggestion of any warning. So many game threads have comments about viruses on the downloads though, and it's almost always false positives from the user's anti-virus, whether that's through the browser or standalone. In the same way, I also occasionally get my AV quarantining a game executable while I'm playing it, saying it contains a trojan (not with this game though).
 

Remarius

Member
Mar 30, 2022
215
175
167
And here is your answer. MS fucked up...again. :rolleyes:


The issue of Windows 10 flagging multiple files, including .exe files, as viruses since the September 9, 2025, cumulative update (KB5065429) is likely tied to Microsoft Defender Antivirus’s updated detection logic and signature definitions. Beyond the WinRing0 driver issue (flagged as "Trojan:Win32/Vigorf.A" due to CVE-2020-14979), the update appears to have broadened its threat detection parameters, leading to increased false positives for certain executable files, particularly those from less common or unsigned software, open-source tools, or older applications. Here’s a concise breakdown of why this is happening and how to address it:

Why Multiple Files (e.g., .exe) Are Being Flagged

  1. Stricter Heuristics: The September 2025 Defender update enhanced behavioral and signature-based detection to catch potential threats, including unsigned or obscure .exe files that resemble malicious patterns.
  2. Vulnerable Driver and Software Blocklist: Microsoft expanded its VulnerableDriver blocklist and similar protections, flagging not just drivers but also executables with outdated or exploitable code.
  3. False Positives: Legitimate software, especially niche tools or older programs, may trigger alerts if they use deprecated APIs, lack digital signatures, or match heuristic patterns for malware.
  4. Patch Tuesday Impact: The KB5065429 update, alongside Defender definition updates around September 4–9, 2025, tightened security, causing some safe .exe files to be misidentified.
Steps to Resolve

  1. Check Quarantine: Open Windows Security > Virus & Threat Protection > Protection History. Identify flagged .exe files. If from trusted sources, select "Restore."
  2. Add Exclusions: Navigate to Virus & Threat Protection > Manage Settings > Add or remove exclusions. Add specific .exe files or their folders to prevent future flagging. Be cautious, as exclusions reduce protection.
  3. Verify File Legitimacy: For unfamiliar .exe files, upload them to VirusTotal.com for multi-engine scanning or Microsoft’s Security Intelligence portal (security.microsoft.com/report) to report false positives.
  4. Update Software: Check for updates to affected programs. Developers may release patched versions to avoid Defender’s new rules (e.g., Fan Control’s GitHub discussions).
  5. System Update: Ensure Windows is fully updated via Settings > Update & Security > Windows Update to apply any follow-up fixes that refine detection.
  6. Secondary Scan: If unsure about a file, use a second-opinion scanner like Malwarebytes to confirm it’s not actual malware.
Additional Notes

  • No Widespread Malware Outbreak: This issue is primarily due to Defender’s aggressive tuning, not a surge in viruses.
  • Persistent Issues: If multiple legitimate .exe files keep getting flagged, consider temporarily disabling Defender’s real-time protection (Settings > Virus & Threat Protection > Manage Settings) while running trusted programs, then re-enable it. Alternatively, report recurring false positives to Microsoft for definition updates.
  • Context Matters: If the flagged files are from unknown sources or exhibit suspicious behavior (e.g., unexpected network activity), treat them as potential threats until verified.
I mean if we were all on Windows 10 or even Windows that might be relevant but..... no. Even the Defender references are irrelevant as its not defender flagging the downloads in most of the cases.
 
  • Like
Reactions: grima_grima

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
Interestingly its not being blocked for me on chrome anymore on the pixeldrain download.
Good to hear! I've double checked and got no warnings from Pixeldrain, Mediafire, WorkUpload and Catbox, so it looks like these are all good.

Still getting blocked for the Datanodes one, and getting weird redirects from VikingFies, so I'll remove them from OP.

And please keep me posted if you see anything weird.

Cheers!
 
  • Like
Reactions: The Sailor Man

grima_grima

Verified Developer
Game Developer
Nov 24, 2021
855
3,411
367
I mean if we were all on Windows 10 or even Windows that might be relevant but..... no. Even the Defender references are irrelevant as its not defender flagging the downloads in most of the cases.
Whether it was Windows defender or something with Chrome, it looks like it "fixed itself". I was able to download the PC version from all the currently available sources. I removed 2 sources that were not working though.
Please try again and let me know if you're still seeing the issue.
 
4.30 star(s) 14 Votes