Virus Total detections in 3.50 - false positives - Jiangmin/Zillya - worgtop

Stefan Schröder — Fri, 26 Apr 2024 09:15:54 -0000

Hi team,

we currently see reports from two scanning engines on Virus Total reporting on downloadable ZIP package "launch4j-3.50-win32.zip" from sourceforge. See screenshot attached. This was confirmed using different systems in different networks to rule out local infections.

It is highly probable that this is a false positiv from the scanning engines "Jiangmin" and "Zillya".

We see the same very reports on exe files created for our jar with launch4j 3.50 signed with Microsoft signtool.

We use the maven plugin to run launch4j exe creation. We run the creation process on different build systems.

Question is how to deal with this? I contacted Zillya! support if they can confirm it is a false positive.

There are some other tickets open regarding similar issues. But the ideas - like code signing - brought up there do not seem to work.

All the best
SSC

Recent changes to 233: Virus Total detections in 3.50 - false positives - Jiangmin/Zillya - worgtop

Virus Total detections in 3.50 - false positives - Jiangmin/Zillya - worgtop