Download is flaged as mallware

[QwazyOne]

Downloading the zip file using chome is blocked and flaged as Mallware

[schrebra]

It's not 🤷 the code is there if you want to run it inside powershell ise.

[j35draaken-ui]

well AI sais it is not IDK

[j35draaken-ui]

https://www.virustotal.com/gui/file/6d806d3f652847aa3fbe6999a9f504f979d578ec8af4282842276815997ae936 It is actually 👍

DO NOT DOWNLOAD THIS!

I'll check the issues in this repository to see what concerns have been raised.Let me get more details on this issue and check the repository content:Based on the issue I found, the code itself is not malicious — but antivirus software is flagging it as malware. This is a common false positive issue. Here's what's happening and what to do:

What's Happening

Someone reported in Issue #2 that when downloading the repository as a ZIP file via Chrome, it's being flagged and blocked as malware.

Why This Happens (False Positive)

This is likely a false positive because:

1. PowerShell scripts are commonly targeted by antivirus software — They're frequently used by both legitimate tools and malware, so security software is overly cautious
2. The code uses Windows API calls — The script uses P/Invoke to call native Windows APIs (User32.dll), which is legitimate but can trigger antivirus heuristics
3. Antivirus heuristics — Many antivirus programs flag executables or scripts that interact with system-level APIs as suspicious

What You Should Do

If you trust the source (schrebra on GitHub):

1. Examine the code directly on GitHub — The repository is open-source and public. You can review the PowerShell code before running it
2. Report it as a false positive to your antivirus vendor with details about what the script actually does
3. Download directly from GitHub instead of as a ZIP:
   • Clone it with Git: git clone https://github.com/schrebra/Problem-Step-Recorder-Plus-Plus.git
   • Or download individual files rather than the ZIP
4. Whitelist the script in your antivirus if you verify it's legitimate

If You Have Concerns

• Check the actual PowerShell code in the repository (it's all on GitHub)
• Look at issues/discussions to see if others have found problems
• Consider submitting the script to a service like VirusTotal to see what multiple antivirus engines think
• File a false positive report with Microsoft Defender or whichever antivirus is blocking it

The project appears to be a legitimate replacement for Microsoft's discontinued Problem Steps Recorder tool — it's meant for taking screenshots and documenting computer issues for tech support purposes.

[j35draaken-ui]

I recomend using Filescan.io
it is more thurough
eventho it looks dramatic at first, the verdict of low risk is prettz low
it has manz red flags out of context, especially because of the recording part of the script a scanner would naturally assume it to be "suspicious".
see for yourself: https://www.filescan.io/uploads/6a0df760875badc3b38eba35/reports/f57d1ef8-4a56-40f1-955f-e5f810c2698b

[j35draaken-ui]

Downloading the zip file using chome is blocked and flaged as Mallware

unfortunatelz they block manz things

[CuddlyCornet645]

https://tria.ge/260520-17cpsac131/behavioral2

[j35draaken-ui]

https://tria.ge/260520-17cpsac131/behavioral2

well I see there are conflicting results. Furthermore I have run this in a safe and outside-monitored VM and found no trubbeling behaviour. Somebody with more experience schould read through the code at some point and then we know