Page 1 of 1

VirusTotal detected

Posted: Wed Aug 28, 2024 6:20 am
by slagusev
Hello!
VirusTotal detects viruses. Although my program runs another one using a command and does nothing else. The entire code is below.
https://www.virustotal.com/gui/file/072 ... f0d1cb2c90

Code: Select all

Procedure ButtonHandler()
  RunProgram("myapp.exe", "-run", "")
  End 1
EndProcedure

Procedure URlHandler()
  RunProgram("url my site")
EndProcedure

Procedure DonateHandler()
  RunProgram("url donate")
EndProcedure

If OpenWindow(0, 100, 200, 350, 200, "Launcher 0.0.1", #PB_Window_SystemMenu | #PB_Window_ScreenCentered)
  
  TextGadget(2, 111, 10, 330, 14, "My site")
  HyperLinkGadget(3, 95, 30, 330, 14, "url", RGB(255,0,0), #PB_HyperLink_Underline)
  SetGadgetColor(3, #PB_Gadget_FrontColor, RGB(0,120,215))
  
  TextGadget(4, 111, 60, 330, 14, "By me coffee")
  HyperLinkGadget(5, 135, 80, 330, 14, "DonationAlerts", RGB(255,0,0), #PB_HyperLink_Underline)
  SetGadgetColor(5, #PB_Gadget_FrontColor, RGB(0,120,215))
  
  TextGadget(6, 20, 110, 330, 14, "Personal accounts are not recommended for use!")
  SetGadgetColor(6, #PB_Gadget_FrontColor, RGB(255,0,0))

  
  BtnLaunch = ButtonGadget(1, 10, 140, 330, 50, "Run MyApp")
  BindGadgetEvent(1, @ButtonHandler())
  BindGadgetEvent(3, @URlHandler())
  BindGadgetEvent(5, @DonateHandler())

  Repeat
    Event = WaitWindowEvent()

    If Event = #PB_Event_CloseWindow  ; If the user has pressed on the close button
      Quit = 1
    EndIf

  Until Quit = 1
  
EndIf

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 6:38 am
by jacdelad

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 6:58 am
by slagusev

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 8:41 am
by BarryG
slagusev wrote: Wed Aug 28, 2024 6:58 amThe question is that I am writing, for example, in the same C# where VirusTotal passes at 100%
Different compilers produce different executables. Just get it whitelisted. I've had to do this for the last 5 or 6 exes of my app with McAfee, and I noticed McAfee cleared it with VirusTotal within ONE HOUR of my last submission to them. So McAfee are probably sick of me sending them updates and just clearing it based on trust now. It makes them look bad when 70 other vendors say my app is clean and only theirs says infected. ;)

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 10:44 am
by PBJim
BarryG wrote: Wed Aug 28, 2024 8:41 am McAfee cleared it with VirusTotal within ONE HOUR of my last submission to them. So McAfee are probably sick of me sending them updates and just clearing it based on trust now. It makes them look bad when 70 other vendors say my app is clean and only theirs says infected. ;)
With respect to the OP for this thread, could you say if you need to submit your executable with every single update that you make, BarryG, or just periodic and therefore once you know that it has been triggered as a positive.

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 11:16 am
by BarryG
I update my exe and then submit it to VirusTotal. If I get even one false positive hit, I submit it for white-listing with that AV vendor. So yes, with every single exe update. And yes, it's a little time-consuming (not too much, maybe 10 minutes, because I have the routine down now). Lucky for me it's only McAfee having a fit now, whereas before it was a couple of others regularly (Microsoft, Bkav Pro, and Cylance).

Here's the cut-and-paste message that I send McAfee each time -> https://i.imgur.com/yrqaMkv.png

McAfee has an online form where I upload the zip file with the message.

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 11:37 am
by PBJim
BarryG wrote: Wed Aug 28, 2024 11:16 am I update my exe and then submit it to VirusTotal. If I get even one false positive hit, I submit it for white-listing with that AV vendor. So yes, with every single exe update.
I can imagine that's likely to be difficult with a constantly updating application, for instance nightly builds.

With my development, a year or so ago Windows Defender often deleted certain executables, then after a while the problem just went away. This year I developed a client-server system with PB that needed to be installed on Windows Server 2019 and on many users' desktop PCs. The client runs ESET Server security (and probably something similar on the PCs but I didn't look). Anyway, there were no problems whatsoever with that installation and it's been running for eight months now.

Re: VirusTotal detected

Posted: Wed Aug 28, 2024 12:02 pm
by BarryG
I don't do nightly builds. I might update once or twice a month, that's all. The process is quick and easy (like I said, about 10 minutes, if even that).