Antivirus Transparency & Trust

PS2 Servers is a 100% open-source, community-driven network utility. Because it binds to local network sockets, handles raw datagrams, and is packaged without commercial code-signing certificates, heuristic antivirus engines may flag downloaded binaries as false positives.

Core Trust Statement

A generic detection label (such as Win32/Wacatac or Generic.Malware) does not prove that a binary contains malicious code; it indicates that an automated heuristic rule matched patterns common to binary packers. Every line of source code in PS2 Servers is publicly auditable on GitHub.

1. Why Heuristics Flag PS2 Servers

Self-Extracting Packaging (Nuitka / PyInstaller)

Single-file desktop executables bundle the Python interpreter, runtime DLLs, and server scripts into a compressed archive. When run, the stub extracts these files into a temporary directory (%TEMP%) and launches an unprivileged child process. Heuristic engines often flag any unpacker stub that extracts and executes code.

Network Socket Binding

PS2 Servers listens on low-level TCP and UDP ports (such as SMB port 1025/1111 and UDPFS port 62966). Software that opens network listener sockets without a commercially purchased digital signature is routinely treated with suspicion by heuristic algorithms.

Lack of Commercial Code Signing

Microsoft and commercial antivirus vendors give high trust ratings to executables signed with Extended Validation (EV) certificates. EV certificates cost hundreds of dollars annually and require corporate registration, which is prohibitive for free open-source hobbyist software.

2. Portable Builds: The Recommended Choice

To reduce false positives, we provide portable archives (PS2Servers-windows-x64-portable.zip). The portable package contains all libraries and executables pre-extracted in a standard folder.

Because portable builds do not use runtime self-extraction wrappers, they trigger significantly fewer heuristic alarms and launch noticeably faster.

3. How to Verify Downloaded Files

Never bypass security warnings blindly. You can verify that your download has not been tampered with through cryptographic proofs:

Compare SHA-256 Checksums: Verify that the hash of your file matches the official SHA256SUMS.txt attached to the GitHub release.
Verify GitHub Build Attestations: Confirm that the file was built directly from our source repository by GitHub Actions:
```
gh attestation verify PS2Servers-windows-x64-portable.zip -R NathanNeurotic/PS2-Servers
```
Run Directly From Source: If you prefer not to execute pre-compiled binaries, clone the repository and run via Python directly:
```
git clone https://github.com/NathanNeurotic/PS2-Servers.git
cd PS2-Servers
python ps2servers.py
```

4. Expected System Behavior

PS2 Servers strictly adheres to the following security principles:

No Kernel Modifications: Does not enable Windows SMB 1.0 optional features, does not install system drivers, and does not alter core OS files.
Firewall Transparency: Any firewall rules created are explicitly named PS2 Servers - ... and can be removed instantly with one click in the app or via Windows Firewall.
Zero Telemetry / No Phone-Home: PS2 Servers does not contact external cloud servers, collects no personal data, contains no advertising, and does not perform background mining.
Clean Removal: Stop the running servers, delete the folder, and the application is completely gone from your system.

5. Adding Exclusions in Windows Security

If Windows Defender quarantines your downloaded portable build:

Open Windows Security → Virus & threat protection.
Select Manage settings under Virus & threat protection settings.
Scroll to Exclusions and click Add or remove exclusions.
Select Folder and choose the folder where you extracted PS2 Servers.