ModPlug Central

OpenMPT => Help and Questions => Topic started by: 2tec on February 20, 2020, 14:56:39

Title: foo_openmpt virustotal returns two positives, are they false?
Post by: 2tec on February 20, 2020, 14:56:39
https://www.virustotal.com/gui/file/2cca5cd9b0aebc25a65d3e3317b4e01ed87b3042920a30bdb6d88501483bb39d/detection (https://www.virustotal.com/gui/file/2cca5cd9b0aebc25a65d3e3317b4e01ed87b3042920a30bdb6d88501483bb39d/detection)

file sourced from here https://www.foobar2000.org/components/view/foo_openmpt (https://www.foobar2000.org/components/view/foo_openmpt)
Title: Re: foo_openmpt virustotal returns two positives, are they false?
Post by: Saga Musix on February 20, 2020, 16:30:07
Both appear to be heuristic detections, meaning that they just vaguely look like something that the antivirus engines recognizes as a potential threat. The fact that only two engines detect it should also make it obvious that it's a false-positive. If it was a real threat, more antivirus vendors should have picked it up after almost two months after the file was released.
But you don't need to take our word for it - submit the sample to the antivirus vendors as a false positive, and they will hopefully confirm to you that the file is indeed clean and put it on their whitelist so that it's not detected in the future anymore.