ironfede / openmcdf

Microsoft Compound File .net component - pure C# - netstandard 2.0
Mozilla Public License 2.0
297 stars 73 forks source link

Trend Micro is quarantining OpenMcdf.dll #49

Closed wkinnett closed 4 months ago

wkinnett commented 5 years ago

Has anyone else had there dll deleted by antivirus? We started getting tagged for this dll because it was used by a malware product, evilclippy (https://kalilinuxtutorials.com/evilclippy-malicious-ms-office-documents/).

Guilt by association I suppose!

Warlock78 commented 5 years ago

https://www.virustotal.com/gui/file/ba9755cc15501ee7a9637f0e3e0c8ea2b5916c4f1d94e0312d41a10e2d79ddc8/detection

ironfede commented 5 years ago

I've sent a note to Trend Micro using their re-classification form at https://www.trendmicro.com/en_us/about/legal/detection-reevaluation.html If you think it can be useful, please send a note you too. This misclassification is really annoying imho... Thank you, Federico

ghost commented 5 years ago

Same problem here. I've also sent a re-evaluation request to Trend Micro.

ironfede commented 5 years ago

Thank you! And many thanks to all people asking Trend Micro for re-classification: I hope that they'll recognize this mistake.

ironfede commented 4 months ago

Closing with the hope that this type of false-positive virus responses will not present again in the future.