OxIDE on VirusTotal

Started by Zlatko Vid, January 01, 2022, 10:54:54 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Zlatko Vid

this program is made by Charles
and again similar crap on VirusTotal

QuoteDetection ratio: 7/72
Security vendor    Result    Update
eGambit    confirmed-timeout    20220101
SymantecMobileInsight    failure    20211119
Cynet    malicious    20220101
APEX    malicious    20220101
Avira    malicious    20211231
VBA32    malicious    20211231
Cylance    malicious    20220101
Rising    malicious    20211231
BitDefenderTheta    malicious    20211223

i really don't know what to say

Chris Chancellor

You need code signing certificate

https://www.ksoftware.net/code-signing-certificates/

Code Signing Certificates
A code signing certificate allows you to digitally
sign your files, securing them against tampering
while providing reputation with Microsoft's SmartScreen
filter and completely eliminating the Unknown Publisher
warnings that might be scaring off your customers.

Chris Chancellor

all exe and dll must be code signed otherwise AV software will detect them as viruss

Chris Chancellor

Theo can help with the code signing process?

Zlatko Vid

#4
I am not sure about that :

Quoteall exe and dll must be code signed otherwise AV software will detect them as viruss

i have some really old software ( free and open-source )  i don't know for all in what is
compiled but don't trigger VirusTotal av-s

in the past only Avira and Avira-based AV complain about malware
some programs created with FreeBasic are also under suspect  including FBC -free basic compiler.
for example CSED editor coded in PowerBasic is 0/71...????

Zlatko Vid

I decompressed
both gxo2.exe and oxygen.dll
then i check on VirusTotal
i get 6/70 warnings ...still large amount of them

Zlatko Vid

hi
I compiled myself version A043... both gxo2.exe
and
oxygen.dll

with FreeBasic 1.0.7
and get same alerts from VTotal
for gxo2 i get 2/70
which is fine BUT when compiled o2 program with this new compiler and dll
i get same bad results 9/64
just to note...i checked this fb 107 on VT which results in 0 alerts
so as conclusion and to stop bothering ,it is not problem in fb compiler
it is also not problem in includes no mather which one u use then in gxo2 or in rtl32/64 include file 

Charles Pegge


You have to submit false-positive binaries to your antivirus provider. Avira is notorious.

Zlatko Vid

Well it is not just Avira
it is well known McAfee,VBA32 and some others

Nicola

Quote from: Charles Pegge on January 05, 2022, 04:55:45 PM

You have to submit false-positive binaries to your antivirus provider. Avira is notorious.

I did this with a program made with another compiler. Trend saw it as infected, but after the report I no longer had the problem.

Zlatko Vid

nicola

QuoteI did this with a program made with another compiler

if you know how please send to

McAffe
VBA32
Malwarebytes

those 3 are critical

Nicola

Aurel, I'm sending you a link that I found for mcAfee. Explain how to submit a false positive.
Surely all antiviruses have this type of service.
The link is in Italian ...
Hello.


https://service.mcafee.com/?locale=it-IT&articleId=TS102053&fromSearch=true&page=shell&shell=article-view

Charles Pegge

Anti-Viruses all have different ways of reporting false positives, unfortunately.

Zlatko Vid

#13
Unfortunately that is true .
Unfortunately is not good for potential users and also for us
like me who is long time user of OxygenBasic

nicola...
your link you give me not work for me

Some AV delete some compiled exes
for example McAfee delete every o2 compiled program
how i know that ...i send source to my internet  friend EdDavis
on the contra side my Kaspersky
delete some compiled programs compiled with freeBasic

on the other side for example transpiler like qb64 is totaly clean according
to virustotal report  :o
and what to say more ?

Zlatko Vid

nicola
i tried with another browser and found email
then i sand link on file compiled with oxygen basic
so we will see