search

oxen-io / oxen-electron-gui-wallet

Oxen electron GUI wallet
https://oxen.io
Other
33 stars 46 forks source link

Oxen Windows GUI wallet uninstaller leftovers have trigger antivirus software detections. #331

Open venezuela01 opened 11 months ago

venezuela01 commented 11 months ago

This follows up on https://github.com/oxen-io/oxen-core/issues/1650.

I have contacted several antivirus vendors; some of them have marked Oxen as clean, while others have advised us on the reason why the Oxen wallet is still labeled as not clean.

Here is a response from FortiGuard:

Through our test, there are some leftovers in the following path after uninstallation: %APPDATA% %LOCALAPPDATA%\Programs %ProgramData%

Since these leftovers contains the installer which is copied to %LOCALAPPDATA%, this behavior would be considered suspicious in some malicious case. Base on this behavior, we will keep the riskware detection.

Next time we release a new Oxen installer, let's ensure that there are no leftovers on the system. We can then test our new version using VirusTotal and coordinate with antivirus vendors if necessary.

I am including the FortiGuard Ticket Number 8990869 here so that anyone can follow up the same ticket in the future.