search

Fr33dan / GPSaveConverter

Utility to transfer save files between the games installed from the Xbox app and other storefronts. https://ko-fi.com/fr33dan
295 stars 33 forks source link

VirusTotal Detections #66

Open anthonybaldwin opened 9 months ago

anthonybaldwin commented 9 months ago

FYI:

https://www.virustotal.com/gui/file/7be01fc179a542e0c2adc5e2904ed52f6a950fe32e947c08202809daec3ab1a9/detection

image

Fr33dan commented 9 months ago

Other than registering the false positive there's not much I can do about this. It's not entirely surprising.

These scans check code behavior for suspicious activity without a good understanding of why the software in question might be doing that. In this case it probably sees how the converter finds existing files within you the AppData folder and modifies them. If you consider the nature of the application this makes sense, you've got to find the save files and change them. Modifying AppData could be used as a technique to inject malicious software into other applications (aka generate Trojans, as the second scanner flag states) so it makes sense to flag it.

This is happened to me before the private sector with other C# applications. With applications such as this that are legit the only way to get them off of these lists is to getting the company who makes the virus scanner to either get enough reports that the application is trusted to add it to a white list, or have it become large enough that someone in the company analyzes the file manually.