Windows 10: Roblox Account Manager: Virus or false positive?

Hey all! So, I've been using a third-party software from GitHub called Roblox account manager for 2-3 weeks and just 2 weeks ago there were many rumours and news of its newest updated version 3.7.2 from GitHub being flagged as having trojans. I tried it myself and windows defender scanned it as a virus and deleted it automatically.So, I researched more into it especially on YouTube and many from the community are two-sided. Saying that the trojans are false positives and some thinking that it's malicious and spreading misinformation. Some heard reports or said their accounts were hacked, but t

:)

 

False positive for desktop shortcut scanner.lnk

The 1.239.488.0 virus / spyware definition update that rolled out about 24 hours ago appears to be producing a false positive for any shortcut placed on the desktop called "Scanner.lnk". I can consistently replicate a false positive for Trojan:Win32/FakeSysdef
with the following steps.

• Create a shortcut to an exe file.
• Place the shortcut on the desktop.
• Name the shortcut "Scanner".
• Run "Quick Scan".

I don't get the same result by directly scanning the file, nor by uploading the file to www.virustotal.com, so it would appear this is as a result of a heuristic rather than a file content analysis. I also don't get the same result with a shortcut that links
to a website.

Can anyone else replicate? How can we go about getting the Windows Defender team to reconsider this heuristic? It's a bit heavy-handed.

 

Questioning a false positive for a Windows Defender virus scan

Anytime you suspect a possible
false positive or you want a second opinion, submit it to one of the online services that analyzes suspicious files. There are also number of web resources (URL Link Scanners) which can be used to check suspicious/unfamiliar
sites or get second opinions.

• Comprehensive List of URL analyzers & services

 

False Positive for AV

It's common to nearly all anti-virus software these days to have some false positives, it's sort of a "Better safe than sorry" philosophy. Most good ones let you dismiss false positives though in my experience. An example would be a blacklisted EXE name. I used to play a game that had an executable names "Joshua.exe" Aparantly a common virus also used that name, and the AV went nuts. Fortunately in my case I was able to whitelist the application.