[GH-ISSUE #4053] [Bug] Installer is flagged by Windows Defender and Virus Total #1830

New issue

Closed

opened 2026-03-23 21:17:33 +00:00 by mirror · 2 comments

mirror commented

2026-03-23 21:17:33 +00:00

Owner

Originally created by @8sd on GitHub (Nov 30, 2023).
Original GitHub issue: https://github.com/AppFlowy-IO/AppFlowy/issues/4053

Bug Description

Hi there,
I'm new to AppFlowy. I tried to install the program on my PC today, but Windows Defender blocked the execution. To double-check for security, I uploaded the file to VirusTotal, and it was flagged as malicious.
It would be beneficial for the acceptance of AppFlowy if both security systems would flag the installer (I will wait until then to install it).
Thank you for the excellent project!

How to Reproduce

Execute the installer on windows with Defender running and upload the installer to VirusTotal.

Expected Behavior

No flags

Operating System

WIN

AppFlowy Version(s)

0.3.8

Screenshots

Additional Context

No response

Originally created by @8sd on GitHub (Nov 30, 2023). Original GitHub issue: https://github.com/AppFlowy-IO/AppFlowy/issues/4053 ### Bug Description Hi there, I'm new to AppFlowy. I tried to install the program on my PC today, but Windows Defender blocked the execution. To double-check for security, I uploaded the file to [VirusTotal](https://www.virustotal.com/gui/file/00b60c91e7c65abca0115f3b19256f9fe02d1ed7601a5fdca0c8e006de6cfb3d), and it was flagged as malicious. It would be beneficial for the acceptance of AppFlowy if both security systems would flag the installer (I will wait until then to install it). Thank you for the excellent project! ### How to Reproduce Execute the installer on windows with Defender running and upload the installer to VirusTotal. ### Expected Behavior No flags ### Operating System WIN ### AppFlowy Version(s) 0.3.8 ### Screenshots ![image](https://github.com/AppFlowy-IO/AppFlowy/assets/32878822/b44ffa4c-76b2-4f44-85e1-d400219bd650) ### Additional Context _No response_

mirror closed this issue

2026-03-23 21:17:33 +00:00

mirror commented

2026-03-23 21:17:34 +00:00

Author

Owner

@8sd commented on GitHub (Nov 30, 2023):

I just noticed, that the Windows Defender Issue was already raised here: #2187
And the VirusTotal issue here: #2113

--> Duplicate

@8sd commented on GitHub (Nov 30, 2023): I just noticed, that the Windows Defender Issue was already raised here: #2187 And the VirusTotal issue here: #2113 --> Duplicate

mirror commented

2026-03-23 21:17:34 +00:00

Author

Owner

@Xazin commented on GitHub (Nov 30, 2023):

Windows defender only complains about the application being unrecognised.

This is because we do not currently have an EV certificate for signing.

I guarantee you, if you download AppFlowy from the right source, which is from here on our GitHub Release page, or our official website, there is nothing to worry about.

When you use tools like VirusTotal, it looks for certain actions, such as moving, downloading, and generally unpacking files. This often causes false positives.

The providers that actually complain, are not the antivirus providers you would actually use.

If Windows Defender thought it was truly a malicious source, it would have removed the file on download, and if you use Chrome, it would have stopped you from downloading it.

PS. This happens because we frequently ship new releases. If we let 0.3.8 be our latest release for 2-3 months, the windows defender warning would disappear for that version.

@Xazin commented on GitHub (Nov 30, 2023): Windows defender only complains about the application being unrecognised. This is because we do not currently have an EV certificate for signing. I guarantee you, if you download AppFlowy from the right source, which is from here on our GitHub Release page, or our official website, there is nothing to worry about. When you use tools like VirusTotal, it looks for certain actions, such as moving, downloading, and generally unpacking files. This often causes false positives. The providers that actually complain, are not the antivirus providers you would actually use. If Windows Defender thought it was truly a malicious source, it would have removed the file on download, and if you use Chrome, it would have stopped you from downloading it. PS. This happens because we frequently ship new releases. If we let 0.3.8 be our latest release for 2-3 months, the windows defender warning would disappear for that version.

mirror referenced this issue

2026-03-24 21:09:38 +00:00

[GH-ISSUE #1830] [FR] supports file upload #9126