Jump to content

False positive


galaktuz

Recommended Posts

This file is still detected as malware by Malwarebytes on virustotal:

https://www.virustotal.com/gui/file/2dfac4450dd6b97c42ce1d6107be02af27192ef17ea50f1d564f1f850c4c7832/detection

Yesterday I also contacted other antivirus companies (7) who detected this file as malware.

One of them (Cynet) also detected Work by Speech installer as malware:

https://www.workbyspeech.com/app/download/Work by Speech v.1.0 installer.exe

which was yesterday detected by 2 antiviruses as malware:

https://www.virustotal.com/gui/file/f4c4079136a9255d19b4033c8173203c93bafe8e874f75fa7758af35a14200e4?nocache=1

But today it's worse. According to virustotal 21 antiviruses recognize Updater.exe as malicious and 11 antiviruses recognize Work by speech installer as malicious.

Cynet started to convince other antivirus companies that both files are malicious.

This application (Work by Speech) should have an auto updater, so someone without hands can complete an update without other person help.
I don't want to remove this functionality. You can read more about this application here: https://www.workbyspeech.com/

I can send you unobfuscated Updater.exe or just C# code for this file.

What Updater.exe file does is this:
1. Check if directory update exists. If not create it.
2. Download all files that are listed in https://www.workbyspeech.com/app/links.txt to update folder
3. Move them to main app folder (and obviously replace files with same names).
4. Run Work by Speech.exe
5. Exit

The code was obfuscated by Obfuscar.

Link to post
Share on other sites

  • Staff

I scanned the file locally and it is not detected. 

Quote

These discrepancies typically solve themselves over time, as our files processing and engine training backend picks these files up and marks them as goodware, and VirusTotal clears their cache and re-scans those files.

For more information, please read  VirusTotal-only detections, not detected in Desktop product.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.