Skip to main content ↑ ↓

Notice

Please be aware that much of the software linked to or mentioned on this forum is niche and therefore infrequently downloaded. Lots of anti-virus scanners and so-called malware detectors like to flag infrequently downloaded software as bad until it is either downloaded enough times, or its developer actually bothers with getting each individual release allow listed by every single AV vendor. You can do many people a great favor when encountering such a "problem" example by submitting them to your AV vendor for examination. For almost everything on this forum, it is a false positive.
Topic: Detected As Malicious Program (Read 2664 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Detected As Malicious Program

Below some my analysis for Foobar2000.

Hybrid Analysis scan this as malicious program HERE

VirusTotal with 3/66 detection HERE

Is this FALSE POSITIVE, need clarification for file intergrity.

Website Link - https://www.foobar2000.org/
SHA-256 - 2fdd5465cf9afaed94a5d7dbdcb9252fb8cd1753b323283f6983ec75db20c250

Re: Detected As Malicious Program

Reply #1 –
Quote
Below some my analysis for Foobar2000.
which part is yours, though?
it looks like an automated scan by various AV software and nothing more on top of that.
some ANC'd headphones + AutoEq-based impulse + Meier Crossfeed (30%)

Re: Detected As Malicious Program

Reply #2 –
False positive.

Those tools are fairly useless at best.

Re: Detected As Malicious Program

Reply #4 –
Quote from: saratoga on
Those tools are fairly useless at best.
Well, at least that analysis is funny:

Quote
Contains ability to measure performance
details: rdtsc

Contains ability to query CPU information
details: cpuid

1/64 reputation engines marked "http://www.foobar2000.org/equalizer" as malicious (1% detection rate)

Found potential IP address in binary/memory
details: "1.0.0.7"

etc.

Re: Detected As Malicious Program

Reply #6 –
Quote from: saratoga on
Only if you assume they'd catch the real thing.

Yeah, I take it that there is some information in those 63 not raising the flag. They aren't all that bad?
High Voltage socket-nose-avatar
 
SimplePortal 1.0.0 RC1 © 2008-2021