False positive - LimitSwap bot

[tsarbuig]

Good morning,

My file (attached) has been incorrectly identified as malware by Windows Defender. The identified detection is  : Malware.AI.860339833

We are a cryptocurrency company, and this false positive stress our customers.

It is common for files compiled from python using pyinstaller to be incorrectly identified as malware in this way.

This is virus-free software which does not contain malware : I would be grateful if you would review and remove this detection.

Thank you
 

LimitSwap.v3.06.zip

[miekiemoes]

Hi,

This is indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed.

Thanks for reporting!

[tsarbuig]

Thank you very much :) 

We have updated our app : can you please remove false positive of this version ? 

We update our app almost daily, so I guess we will see each other quite often here... is there a way to be whitelisted forever ?

Thanks :)

LimitSwap.v3.10.zip

[miekiemoes]

Hi,

It's possible to whitelist this forever, but in your case, it's more challenging, as there's no digital signature or even version information applied to the file properties/resources. So that makes it really hard to whitelist forever. I suggest to apply at least version information to the file, as this might also come in useful for other Antivirus that detect this (since Malwarebytes isn't the only antivirus detecting).

Thanks!

[tsarbuig]

thank you for your answer... You're the only one, with another unknown company who never answer to email (Jiangmin)

https://www.virustotal.com/gui/file/b5ea026ffb7ff0cb938439b68388d6c54566c7535e8f88f68de11a536abd360b/detection

So, can you remove the v3.10 that I attached above to your detected threats please ? It's still detected today.

Thank you very much :)

[miekiemoes]

Hi,

Our engine format and configuration in VirusTotal is different than our consumer and corporate products’ default configuration. In VirusTotal we use a command-line engine with different configuration and detection techniques/heuristics which might detect more than the commercial product. There are also false-positive suppression mechanisms in the commercial product which are not present in the command-line engine in VirusTotal.

This file has been whitelisted for our commercial products already and it is not detected anymore. This will eventually fix itself in Virustotal as well, as we don't have control over this.