search

SamuelTulach / VirusTotalUploader

C# Open-Source Winforms application for uploading files to VirusTotal
GNU General Public License v3.0
1.15k stars 143 forks source link

Virus Total flags your own program as malware #83

Open LinuxOnTheDesktop opened 3 years ago

LinuxOnTheDesktop commented 3 years ago

Please see here, which is the VirusTotal report for the zipped version of your program. Obviously, this is 'doubleplus not good'.

LinuxOnTheDesktop commented 3 years ago

The situation seems even worse (though VirusTotal appears unable to count . .) with the unzipped file.

SamuelTulach commented 3 years ago

Unfortunately, as it has been discussed numerous times, without code signing certificate, anti-viruses tend to flag it as risk ware.

That's why the executables you see in release section are built on AppVeyor, directly from source code.

LinuxOnTheDesktop commented 3 years ago

Presumably you should put something to that effect in the README.

SamuelTulach commented 3 years ago

After a quick check and chat with some people, it seems like the empty info in AssemblyInfo.cs was causing the detections. Also I will hopefully have a code signing certificate for the future.

SamuelTulach commented 3 years ago

Unfortunately InnoSetup still seems to get flagged. I will probably try to move away from it, but that would need a custom installer since I am sure other generic install creators would be flagged.

LinuxOnTheDesktop commented 3 years ago

Right. In the meantime I do advise modifying the README. Thank you for your software.

SamuelTulach commented 2 years ago

I've got code signing certificate now too. Unfortunately the InnoSetup installer is still (ironically) getting flagged by some AVs. I will probably end up writing a custom minimal installer myself.

vertigo220 commented 2 years ago

Considering they themselves mention and link to this software as a replacement for their own, discontinued, version, you'd think they would make the effort to make sure this didn't happen as well as ensure there is no malware in it. But I agree, if this is an issue, it's best to mention it in the readme and probably even on the releases page.