search

mrfearless / RadASM2

RadASM v2
348 stars 69 forks source link

Setup.exe considered malware or a virus #11

Open denshade opened 5 years ago

denshade commented 5 years ago

According to chrome and firefox the release setup.exe and zipfile contains a virus/malware.

mrfearless commented 5 years ago

Thanks for letting me know.

I think its due to the use of the Tarma InstallMate 9 Installer which uses stubs to put the installer together. I noticed these loaders and stubs are flagged via Adlice RogueKiller as well.

I uploaded the following files to VirusTotal to see what it shows - with detections in brackets:

Highlevel.zip only has text files for supporting higher level languages (c++, freebasic, bcc etc), but does come with sample projects, but none are compiled, so i'm unsure why this one is heavily flagged. RadASM-2.2.2.4-FullPackage.zip is just a combination of all the zips (which includes Highlevel.zip so that would explain why that one is also flagged due to the inclusion of the contents of Highlevel.zip).

I suspect a lot of false positives especially in the RadASM-2.2.2.4-IDEOnly.zip and Assembly.zip.

I you only need assembler support then downloading the RadASM-2.2.2.4-IDEOnly.zip and then the Assembly.zip, Language.zip, RAHelp.zip files and extracting to the same folder where RadASM.exe is should give you a working version.

An older version of RadASM v2.2.2.0 is available here as an alternative: https://www.softpedia.com/get/Programming/File-Editors/RadASM.shtml

mrfearless commented 2 years ago

Removed the Tarma InstallMate Setup.exe files - suspect they may be infected. So for safety I am removing them.