.exe standalones reportedly have viruses?

If you find an issue in LiveCode but are having difficulty pinning down a reliable recipe or want to sanity-check your findings with others, this is the place.

Please have one thread per issue, and try to summarize the issue concisely in the thread title so others can find related issues here.

Moderator: Klaus

Post Reply
FESEFW
Posts: 11
Joined: Sun Sep 06, 2020 4:58 pm

.exe standalones reportedly have viruses?

Post by FESEFW » Tue Jan 10, 2023 6:58 pm

Hi.
I've been working on many projects over the years.
Recently, I've published my game in my neighborhood. A few days ago, I thought to myself - maybe more people will download my app if I provide a report that the file is safe. I then thought, why not try VirusTotal.
A scan reported that it has 2 trojan viruses - 'Heur' and 'susgen' (?).
That made me question each of the apps that I've made over the years, so I scanned them one by one on VirusTotal and found that each one of them is said to contain these 2 trojan viruses.

Are those false reports? Am I the only one?

Please answer.
Thank you.

richmond62
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 10082
Joined: Fri Feb 19, 2010 10:17 am

Re: .exe standalones reportedly have viruses?

Post by richmond62 » Tue Jan 10, 2023 9:17 pm

The first question I would ask is when these trojan viruses are first listed as having appeared, and if at least one of the Windows standalones you made before that date is reported as containing one of those trojans the thing is a false positive.

It behooves LC to do something about this, just as the should do something about the 'red wall of death' that appears in web browser windows when trying to load their downloads page.

richmond62
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 10082
Joined: Fri Feb 19, 2010 10:17 am

Re: .exe standalones reportedly have viruses?

Post by richmond62 » Tue Jan 10, 2023 9:33 pm

Here's VirusTotal's analysis of my 32-bit Windows standalone of my Devawriter Pro (latest version)
made with LiveCode 9.6.3:
-
SShot 2023-01-10 at 22.27.50.png
-
Trojan.Heur!.02052021 & AdWare.Wajam.fr

AND here is VirusTotal's analysis of my 64-bit Windows standalone of my Devawriter Pro (latest version)
made with LiveCode 9.6.3:
-
SShot 2023-01-10 at 22.32.47.png
-
Now I suspect this is a load of old cobblers: but it isn't doing anyone any favours at all.

https://www.virustotal.com/gui/home/upload

AND, here is VirusTotal's 'go' with a silly, one card stack I ran off as a Windows 32-bit standalone with
LC 8.0.0:
-
SShot 2023-01-10 at 22.38.27.png
-
As ALL of these standalones were generated on Mac OS 13.2 I think the whole thing is utter rubbish.

The real problem is that Windows users won't know that, so there are going to be a large number of
Windows users reporting that, and, unless LC talk to the anti-virus people, the bottom of the market
for applications authored using LiveCode for Windows is going to drop out.

richmond62
Livecode Opensource Backer
Livecode Opensource Backer
Posts: 10082
Joined: Fri Feb 19, 2010 10:17 am

Re: .exe standalones reportedly have viruses?

Post by richmond62 » Tue Jan 10, 2023 9:50 pm

"Just for fun" . . .

Here's what VirusTotal has to say about LiveCodeCommunityInstaller-9_6_3-Windows-x86.exe:
-
SShot 2023-01-10 at 22.47.17.png
-
And LiveCodeCommunityInstaller-9_6_3-Windows-x86_64.exe:
-
SShot 2023-01-10 at 22.48.51.png
-
What is REALLY INTERESTING is that Intego VirusBarrier Scanner picked up NOTHING.

https://www.intego.com/virusbarrier-scanner

stam
Posts: 3061
Joined: Sun Jun 04, 2006 9:39 pm

Re: .exe standalones reportedly have viruses?

Post by stam » Wed Jan 11, 2023 12:10 am

Clearly false positives...

While a lot of this needs to be led by LC, I think each author also has a duty to contact antivirus companies regarding their own standalones to increase the push against this false positive nonsense...

FourthWorld
VIP Livecode Opensource Backer
VIP Livecode Opensource Backer
Posts: 10043
Joined: Sat Apr 08, 2006 7:05 am
Contact:

Re: .exe standalones reportedly have viruses?

Post by FourthWorld » Wed Jan 11, 2023 3:36 am

Stam's advice is valuable. Anyone can report a false positive to the antivirus vendor, the sooner the better.

For background on why false positives are so common in antivirus tools see the two links in this message:
https://forums.livecode.com/viewtopic.p ... 47#p220523
Richard Gaskin
LiveCode development, training, and consulting services: Fourth World Systems
LiveCode Group on Facebook
LiveCode Group on LinkedIn

Post Reply