VirusTotal still falsely flagging NVDA. Please fix.

[QuentinC]

Good morning,

 

Once again I am disappointed to find that MalwareBytes has done nothing to fix the false positives showing on VirusTotal.  Please see the previous thread from earlier this year: 

 

The current VirusTotal result for NVDA 2022.3 Beta 2 is available here: https://www.virustotal.com/gui/file/5eda2238993892c68faa63db0562ad78f4564956cbb5a6895367884feb66fad0

 

Please rectify this.  It is not appropriate to put this on VirusTotal.  It has been an issue all year and is very disappointing.

 

Kind regards

 

Quentin. 

[David H. Lipman]

Please reference:   VirusTotal-only detections, not detected in Desktop product

[QuentinC]

Thanks David,

 

That's fine, I do understand that evidently the VirusTotal settings are different to what end-users experience on a local product.... But I have companies worried about using our product because VirusTotal has been showing these false positives since at least May, and I can't seem to get anyone to bother fixing it.  MalwareBytes have happily told me on several occasions that they have checked our files and they are clean, which is great, and what we already knew, but the people who are worried are looking at VirusTotal, not an installed copy of MalwareBytes.

 

It's causing us problems, and not making MalwareBytes look overly great either to be honest.  It's just really frustrating, as you can probably tell :)

 

Quentin.

[David H. Lipman]

 

 

[QuentinC]

Good morning,

 

I thought we'd got over the false positives - our latest stable release, NVDA 2022.2.1, is not flagged by MalwareBytes.  However, our beta of the next version of NVDA is once again flagged with the ever helpful "Malware.Heuristic.1001":

 

https://www.virustotal.com/gui/file/a8ed5bd04cb8c8a031e96fabc2f1064c69923d3172799d570be52faeb7fc0e26/detection

 

Could someone please look into this again and whitelist us, again?

 

Thank you!

 

Quentin.

[David H. Lipman]

Does the Malwarebytes desktop software also flag it ?

[QuentinC]

Based on the previous conversation here, it's quite possible the desktop version isn't flagging it.  The problem is that a lot of businesses use VirusTotal to check programs and start getting anxious when a renowned engine like MalwareBytes is flagging a program, even if it is only 1 "detection" out of 60 or 80 engines, which should indicate to a user it is almost always a false positive.

[thisisu]

3 hours ago, QuentinC said:

Based on the previous conversation here, it's quite possible the desktop version isn't flagging it.  The problem is that a lot of businesses use VirusTotal to check programs and start getting anxious when a renowned engine like MalwareBytes is flagging a program, even if it is only 1 "detection" out of 60 or 80 engines, which should indicate to a user it is almost always a false positive.

Hello,

Working to resolve this for you. I think there is a mismatch of the engine version VirusTotal uses compared to what is available today. We are still however usually able to correct these. Try refreshing VirusTotal in about 4 hours from now to see if the detection persists.

Regards

[QuentinC]

Thanks so much!  I'll check back with VirusTotal later today.

 

Quentin.

[leo3487]

I just click on reanalyze file (go to link at 1º post and VT said me results of 17 days ago)

Malwarebytes still detect it as Malware.Heuristic.1001

https://www.virustotal.com/gui/file/5eda2238993892c68faa63db0562ad78f4564956cbb5a6895367884feb66fad0?nocache=1

[thisisu]

Yes I'm seeing that too. Asking more colleagues to take a look.

[QuentinC]

Thanks!

 

Looking at the Virus Total report for out latest stable version, NVDA 2022.2.2: https://www.virustotal.com/gui/file/fd4449ec511d5d390981ece4d57aebd74eedc5cd8d76c4b9e26684efd5e871b9 VT is still flagging it with Malware.Heuristic.1001 against MalwareBytes.

 

Looking at our latest beta (of the next NVDA 2022.3), Beta 4 - it comes up clean now: https://www.virustotal.com/gui/file/92e04062b978aed9d51385edf2a21470869e39b85aec9262e513aa1397d8c184

 

Interesting, it's also coming up clear for Zillya, and I've never even been able to get them to respond at all to false positive reports.

 

 

[shadowwar]

I have whitelisted the digital signature. So any valid signed file should not be detected anymore. Please give it a day to take effect.