Many boxed apps detects by Windows Defender as "Program:Win32/Wacapew.C!ml"
Posted: Tue Nov 21, 2023 11:18 pm
After building boxed file, many programs starts to be detected by the Microsoft anti-virus as "Program:Win32/Wacapew.C!ml" which wasn't met in the original files. Many people who received such files from me on Windows 10-11 reports they're immediately killed after download, if built-in OS protection is enabled. I know it's something about compressing code and memory hi-jacking by EVB virtualizer launcher - but can these alerts be reduced somehow? I don't care about them, but casual people - really yes...
Here's example of AV alerts on VirusTotal after making portable version of RetroArch program:
https://www.virustotal.com/gui/file/ec1 ... e5bac0e3b1
And here's even more paranoid situation, although each separate file included into boxed app is clear:
https://www.virustotal.com/gui/file/247 ... f23733cc96
Makes no sense to upload the source files, because it happens to almost every one...
Here's example of AV alerts on VirusTotal after making portable version of RetroArch program:
https://www.virustotal.com/gui/file/ec1 ... e5bac0e3b1
And here's even more paranoid situation, although each separate file included into boxed app is clear:
https://www.virustotal.com/gui/file/247 ... f23733cc96
Makes no sense to upload the source files, because it happens to almost every one...