Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Setup.exe considered malware or a virus #11

Open
denshade opened this issue Jul 10, 2019 · 2 comments
Open

Setup.exe considered malware or a virus #11

denshade opened this issue Jul 10, 2019 · 2 comments

Comments

@denshade
Copy link

According to chrome and firefox the release setup.exe and zipfile contains a virus/malware.

@mrfearless
Copy link
Owner

Thanks for letting me know.

I think its due to the use of the Tarma InstallMate 9 Installer which uses stubs to put the installer together. I noticed these loaders and stubs are flagged via Adlice RogueKiller as well.

I uploaded the following files to VirusTotal to see what it shows - with detections in brackets:

Highlevel.zip only has text files for supporting higher level languages (c++, freebasic, bcc etc), but does come with sample projects, but none are compiled, so i'm unsure why this one is heavily flagged. RadASM-2.2.2.4-FullPackage.zip is just a combination of all the zips (which includes Highlevel.zip so that would explain why that one is also flagged due to the inclusion of the contents of Highlevel.zip).

I suspect a lot of false positives especially in the RadASM-2.2.2.4-IDEOnly.zip and Assembly.zip.

I you only need assembler support then downloading the RadASM-2.2.2.4-IDEOnly.zip and then the Assembly.zip, Language.zip, RAHelp.zip files and extracting to the same folder where RadASM.exe is should give you a working version.

An older version of RadASM v2.2.2.0 is available here as an alternative: https://www.softpedia.com/get/Programming/File-Editors/RadASM.shtml

@mrfearless mrfearless pinned this issue Jul 10, 2019
@mrfearless
Copy link
Owner

Removed the Tarma InstallMate Setup.exe files - suspect they may be infected. So for safety I am removing them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants