LazyGit is flagged as malware by Windows Security

[hug0b]

Describe the bug
Windows 10 flags lazygit 0.38.1 as malware

Trojan:Win32/Bearfoos.B!ml
This program is dangerous and executes commands from an attacker.
file: C:\Program Files\Lazygit\lazygit.exe

To Reproduce
Install and execute lazygit 0.38.1 on Windows 10

Expected behavior
Windows should not flag this program as a malware if the program isn't malicious.

Version info:
lazygit 0.38.1
git version 2.38.1.windows.1

Additional context
Reverting to version 0.37 seems to remove the security warning

[hug0b]

Continuing the investigation

VirusTotal reports

0.37 Windows_x86_64 - 0/69 detections
0.38 Windows_x86_64 - 0/69 detections
0.38.1 Windows_x86_64 - 1/69 detections
MaxSecure: Trojan.Malware.300983.susgen

0.38.1 Source Code zip - 0/59
0.38.2 Windows_x86_64 - 1/69 detections
MaxSecure: Trojan.Malware.300983.susgen

0.38.2 Windows_32-bit - 1/70 detections
SecureAge - Malicious

0.38.2 Linux_x86_64 - 0/61 detections

Bitdefender does not seem to flag any version as a malware.

[jesseduffield]

I have no idea why it's been caught or what to do to rectify this. Does anybody have experience with Windows Security's false positives?

[Neko-Box-Coder]

See https://superuser.com/questions/1416678/my-own-backup-program-was-detected-as-win32-bearfoos-aml-virus
It might help submitting to Microsoft

[hug0b]

Closing since it seems I don't have this warning anymore

[robbyrice]

Just ran into this on a windows 11 machine with lazygit v0.54.2. The solution was to allow Windows Security to execute the file on my computer.