Page 1 of 1
.exe standalones reportedly have viruses?
Posted: Tue Jan 10, 2023 6:58 pm
by FESEFW
Hi.
I've been working on many projects over the years.
Recently, I've published my game in my neighborhood. A few days ago, I thought to myself - maybe more people will download my app if I provide a report that the file is safe. I then thought, why not try VirusTotal.
A scan reported that it has 2 trojan viruses - 'Heur' and 'susgen' (?).
That made me question each of the apps that I've made over the years, so I scanned them one by one on VirusTotal and found that each one of them is said to contain these 2 trojan viruses.
Are those false reports? Am I the only one?
Please answer.
Thank you.
Re: .exe standalones reportedly have viruses?
Posted: Tue Jan 10, 2023 9:17 pm
by richmond62
The first question I would ask is when these trojan viruses are first listed as having appeared, and if at least one of the Windows standalones you made before that date is reported as containing one of those trojans the thing is a false positive.
It behooves LC to do something about this, just as the should do something about the 'red wall of death' that appears in web browser windows when trying to load their downloads page.
Re: .exe standalones reportedly have viruses?
Posted: Tue Jan 10, 2023 9:33 pm
by richmond62
Here's VirusTotal's analysis of my 32-bit Windows standalone of my Devawriter Pro (latest version)
made with LiveCode 9.6.3:
-
-
Trojan.Heur!.02052021 & AdWare.Wajam.fr
AND here is VirusTotal's analysis of my 64-bit Windows standalone of my Devawriter Pro (latest version)
made with LiveCode 9.6.3:
-
-
Now I suspect this is a load of old cobblers: but it isn't doing anyone any favours at all.
https://www.virustotal.com/gui/home/upload
AND, here is VirusTotal's 'go' with a silly, one card stack I ran off as a Windows 32-bit standalone with
LC 8.0.0:
-
-
As ALL of these standalones were generated on Mac OS 13.2 I think the whole thing is utter rubbish.
The real problem is that Windows users won't know that, so there are going to be a large number of
Windows users reporting that, and, unless LC talk to the anti-virus people, the bottom of the market
for applications authored using LiveCode for Windows is going to drop out.
Re: .exe standalones reportedly have viruses?
Posted: Tue Jan 10, 2023 9:50 pm
by richmond62
"Just for fun" . . .
Here's what VirusTotal has to say about LiveCodeCommunityInstaller-9_6_3-Windows-x86.exe:
-
-
And LiveCodeCommunityInstaller-9_6_3-Windows-x86_64.exe:
-
-
What is REALLY INTERESTING is that Intego VirusBarrier Scanner picked up NOTHING.
https://www.intego.com/virusbarrier-scanner
Re: .exe standalones reportedly have viruses?
Posted: Wed Jan 11, 2023 12:10 am
by stam
Clearly false positives...
While a lot of this needs to be led by LC, I think each author also has a duty to contact antivirus companies regarding their own standalones to increase the push against this false positive nonsense...
Re: .exe standalones reportedly have viruses?
Posted: Wed Jan 11, 2023 3:36 am
by FourthWorld
Stam's advice is valuable. Anyone can report a false positive to the antivirus vendor, the sooner the better.
For background on why false positives are so common in antivirus tools see the two links in this message:
https://forums.livecode.com/viewtopic.p ... 47#p220523