billthefarmer / sig-gen

Android Signal Generator
115 stars 24 forks source link

possible virus in sig-gen #8

Closed paulmcg1 closed 7 years ago

paulmcg1 commented 7 years ago

Malwarebytes 2.1.1.6 (for Android) with the latest database is reporting that Signal Generator 1.10 has a virus (see screen below). I assume that is a "false positive" but can you look into this? I downloaded Signal Generator 1.10 from f-droid.org .

screenshot_2017-04-21-06-41-36

paulmcg1 commented 7 years ago

See this article for more information. https://www.helpnetsecurity.com/2017/04/18/bankbot-trojan-google-play/

billthefarmer commented 7 years ago

This has come up before, see #6. I have retested it, the results are: https://www.virustotal.com/en/file/a3411ed7b27612e4fe465f550ef7071ac6c2bd524cee94cf9c6802a573143efd/analysis/1492796096/. These apps are built very carefully by F-Droid in a virtual machine. I think it is a false positive.

paulmcg1 commented 7 years ago

Are you using any third-party libraries that might contain a virus?

billthefarmer commented 7 years ago

Not in this app. F-Droid only allows libraries from trusted sources or built as part of the app.

paulmcg1 commented 7 years ago

Thanks for the information. I will close the issue because it's due to a "false positive" in the Android version of Malwarebytes.

eighthave commented 7 years ago

F-Droid requires all apps are built from 100% source. I've never heard of a trojan or virus entering any free software distro with similar requirements (Debian, Ubuntu, Fedora, Redhat, SUSE, Gentoo, etc).

k3b commented 4 years ago

i just checked www.virustotal.com with this apk source: https://f-droid.org/repo/org.billthefarmer.siggen_121.apk

It found no issues