PDA

View Full Version : VirusTotal Analysis for SB8 #4000 compiled apps (2013/03/23)


NewsArchive
03-23-2013, 07:50 AM
SetupBuilder 8.0 #4000 test install images submitted to VirusTotal, a
subsidiary of Google, for analysis.

File name: sb8virustotal_4000.exe
Detection ratio: 0 / 46
Analysis date: 2013-03-23 10:02:31 UTC

https://www.virustotal.com/en/file/5fde490ec39820327dd395b5322fa0548a41fc7b02006c6cbd c6cc7aef7c9ee4/analysis/1364032951/

File name: sb8virustotalex_4000.exe
Detection ratio: 0 / 46
Analysis date: 2013-03-23 10:03:43 UTC

https://www.virustotal.com/en/file/e44bc698fff6f62178a2b95ab5b7d92514bcd46331beda567c beec5220b11497/analysis/1364033023/

File name: sb80_4000_Dev.exe
Detection ratio: 0 / 46
Analysis date: 2013-03-23 10:11:13 UTC

https://www.virustotal.com/en/file/b258c80472f761927157a281b7deb19fa2c20b01410a3654ce a5ce456635b9f5/analysis/1364033473/

Friedrich

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

--Helping You Build Better Installations
--SetupBuilder "point. click. ship"
--Create Windows 8 ready installations in minutes
--Official Comodo Code Signing and SSL Certificate Partner
NewsArchive
03-23-2013, 07:50 AM
hehehe ....

:'(

--
JP
__________________________________________________ _____

For those who do not understand ... : "Qui bene amat bene castigat."
__________________________________________________ _____

DMC - Data Management Center : a tool to let you Migrate Import Export
Transfer your Data
www.dmc-fr.com
NewsArchive
03-23-2013, 07:51 AM
Friedrich

Just for the hellofit, what do you do if one of those testing slugs comes up
with false positives?

Dan
NewsArchive
03-23-2013, 08:33 AM
Dan,

> Just for the hellofit, what do you do if one of those testing slugs
> comes up with false positives?

Then I send a test installer to the protection software vendor and report
the "false-positive". In most cases, they fix it in their next virus
definition update within 12 hours.

Friedrich
NewsArchive
03-23-2013, 10:02 AM
Cool, Thanks

Dan Scott
NewsArchive
03-25-2013, 08:24 AM
Friedrich,

for me to understand: You generated an Install, using SB8, you called it
sb8virustotal_4000.exe.

Then you sent it to VirusTotal to be checked - right?

Do you recommend that we also should send our installs to them and post the
results on our homepages? (As long as they are < 32 MB)

At least it gives a hint for false-positives and that we better take action then.

Well, my install files are three times larger, so I will send in every binary
(.EXE, .DLL etc) file separately.

bye
Wolfgang