View Single Post
Old 1st October 2015, 20:45   #35  |  Link
nalor
Registered User
 
Join Date: Dec 2013
Posts: 490
Just want to report that I've spent some time investigating the 'Malware' issue and my first result is that I've sent false-positive-reports to Baidu and Filseclab.

Finally I've reduced my source to this quite useless piece of code but those 2 engines still detect a threat in it:

Quote:
Procedure.s Test1(iNumber.i)
ProcedureReturn "result1"
EndProcedure

Procedure.s Test2(iNumber1.i, sString1.s, sString2.s)
Test1(234)
ProcedureReturn "result2"
EndProcedure
Procedure Test2 calls procedure Test1, but Test2 itself is never called... so this does really nothing and is still detected as threat. But when the call from Test2 to Test1 is removed, the compiled result is considered harmless
I'm using purebasic 5.31 x86 - just in case you want to reproduce my results.
Test Result of the Metascan

Unfortunately procedures are quite often called from other procedures in purebasic - so it's really impossible to get a green result in a purebasic application that really does something useful...

So I'm waiting to get feedback from both malware-detection-engines and when they've fine tuned their detection algorithm I'll continue my work to get a 'green' state on https://www.metascan-online.com

Hope this is acceptable for everybody
nalor is offline   Reply With Quote