search

portapps / discord-portable

🚀 Discord portable for Windows
https://portapps.io/app/discord-portable/
MIT License
229 stars 16 forks source link

Dozens of AVs detect the wrapper as malware #7

Closed jyrkive closed 6 years ago

jyrkive commented 6 years ago

https://www.virustotal.com/#/file/bb5e59d432cb3d06521c60ec3d877f2841664a39445e735d43859c131b4b5d3f/detection

32 AVs is so many that I'm rather going to believe that the latest version really is infected, rather than going to run it on my PC.

crazy-max commented 6 years ago

Hi @jyrkive,

It's the same issue as #3, every detections found by VirusTotal scan are generic. Most likely based on a heuristic detection. Heuristics are more prone to false-positive detections.

This happens quite often with programs written in Golang. The best you can do is to report this to your Antivirus software vendor.

And since the wrapper discord-portable.exe is open source, you can verify that it does not include any malware.

Of course i will try to find dependencies and system calls to avoid heuristic detection like this. I also think that the architecture of the executable (ia32) is also a consequence of the problem encountered. I'll analyze that and let you know.

crazy-max commented 6 years ago

@jyrkive, can you try the latest release ? Thx

crazy-max commented 6 years ago

I have submit discord-portable.exe to Kaspersky for example and here is their response :

Hello,

Sorry, it was a false detection. It will be fixed. Thank you for your help.

Sincerely yours, Alexander Kolesnikov, Malware Analyst, Kaspersky Lab

39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com

jyrkive commented 6 years ago

Thanks, it's much better now. :)