[solved] Download compromised according to Windows Defender

[krabat]

According to Windows ® Defender of Windows 10 download smtube-16.3.0-x64.exe on sourceforge.net is infected with Trojan Win32/Varpes.M!cl.

The SHA1 hash of the local download is the same as the one stated on the downloads page.
Searching the web strongly suggests downloads on sourceforge.net have been including malware several times before. So wouldn't it eventually be advisable to stop using this platform?
Also, it would be good if SMTube was covered by Windows signatures, much as SMPlayer is already by now.

Anyway it would be nice if you could give some feedback what's going on here.

[rvm]

You can see here an analysis of the file by a lot of antivirus:
https://www.virustotal.com/en/file/b496 ... /analysis/

None of them detects anything wrong. The file is clean.

I've just signed both installers.

[krabat]

The results on virustotal.com are indeed strongly suggesting that everything's alright with the file and the warning of Windows Defender was some false-positive.

Meanwhile there have been two versions of the file around. The SHA256 hashes are b496bd76e7ba2dbb04a11f960aeeb60fe06de949ff062fe6a8df92f34f71298b and 0f3f29a30b6235cb18aa8bfa8368480a7a772270678010874258f3d0cee8cf8d respectively, both have already been checked on virustotal.com (, ) and are, much like some other files, tagged as "Modified <20h ago" on .
Am I right by assuming the difference is that the new versions are now signed by the usual Windows certificate chain? Btw. the new version isn't considered infected any longer by Windows Defender using today's malware definitions.

[rvm]

Yes, I uploaded both (32- and 64-bit) installers again, this time they are digitally signed.

[krabat]

Alright. Thanks for signing the SMTube installers, too. This makes dealing with them a lot more convenient, IMO.