chrisknepper / android-messages-desktop

Android Messages as a Cross-platform Desktop App
MIT License
1.01k stars 117 forks source link

Virustotal Detection #47

Open ghost opened 6 years ago

ghost commented 6 years ago

Hi, Sorry my lack of knowledge in coding, but running the *exe through virustotal results in:

https://www.virustotal.com/#/file/71ee6759340a6a1dae8e79ca4fa3c4ec0999689c8ce13649198c3e58e616aac3/detection

I would REALLY want to try this out (especially since the Google Apps version notifications don't look to work for me and the features you are implementing look great!) but I'm not really assured that signing in to my main account through your app would be completely safe? I think in another instance Electron does a false-positive (again, not completely versed in coding).

Either way, thank you for your hard work!

chrisknepper commented 6 years ago

Hi @hexalform ,

These are false positives. In particular, as far as Bkav, HW32.Packed seems to be a common false positive for executables which contain things which are compressed. I will say that the Endgame anti-virus started flagging my app at Version 0.2.0 which is when we added electron-settings as a dependency, so Endgame may not like that package. Endgame is very vague about what is triggering their detector or why they think it's a threat. I would just say that the 60+ other AVs not triggering should make it clear that the app is safe.

There are definitely other Electron apps which trip certain virus detectors. Examples include desktop-dimmer

https://www.virustotal.com/#/file/daa55290413eabc74cdb3207ffc6dd415c123a6b93af54e62541383326fc079b/detection

My app is completely open source and definitely feel free to look at the code and see that it does not store or collect any information about your Google account or messages. I'm also happy to answer any questions about the code or app that you have.