Win11 Detecting as Trojan #433

Closed

opened 2026-11-08 01:24:35 +00:00 by aaronjamestodd-ui · 4 comments

aaronjamestodd-ui commented

2026-11-08 01:24:35 +00:00

(Migrated from github.com)

Builder version

Latest Build

How you built

Hookshot Builder app (Windows)

Game files given to it

A .nup

The error

Just a heads up to anyone else having this issue.  Windows Security keeps flagging as Trojan.  Have to add to exclusions.

Visual Studio or Build Tools version, and Windows SDK version

No response

Operating system and free space on the output drive

Windoes 11

Before you send it

I'm on the newest release, or it still fails on it.
I searched the open issues for this error.
I'm not attaching game files or anything built from them.

### Builder version Latest Build ### How you built Hookshot Builder app (Windows) ### Game files given to it A .nup ### The error ```text Just a heads up to anyone else having this issue. Windows Security keeps flagging as Trojan. Have to add to exclusions. ``` ### Visual Studio or Build Tools version, and Windows SDK version _No response_ ### Operating system and free space on the output drive Windoes 11 ### Before you send it - [x] I'm on the newest release, or it still fails on it. - [x] I searched the open issues for this error. - [x] I'm not attaching game files or anything built from them.

👀 1

NotRexed commented

2026-11-08 05:39:57 +00:00

(Migrated from github.com)

The new release (https://github.com/NotRexed/Hookshot/releases/tag/new-installer) is a single small HookshotBuilder.exe (170 KB, no scripts inside) that downloads the tools itself and checks each against its checksum; the compiler comes from llvm-mingw's own official release. Defender scans it clean here. If your antivirus still removes a tool, the builder now says so plainly and has a Repair button that downloads it again.

👍 1

aaronjamestodd-ui commented

2026-11-08 06:05:26 +00:00

(Migrated from github.com)

Just downloaded it. Still being flagged as trojan. Had to add to exclusions again!

aaronjamestodd-ui commented

2026-11-08 06:06:55 +00:00

(Migrated from github.com)

New UI looks great btw, very slick!!

NotRexed commented

2026-11-09 05:48:51 +00:00

(Migrated from github.com)

Tracked in #1003, follow there. That issue collects every report of antivirus false positives on the builder, and this one is linked from it with its GPU, version and log details. It is a false positive; the tracker says what you can do until the builder is signed. If it still happens on v2.0.6 (https://github.com/NotRexed/Hookshot/releases/tag/v2.0.6; Update next to Play in the launcher), please add a comment there with your hookshot_log.txt.