Latest version of Multicommander detected as a virus

[Skylight0502]

So I tried to install using auto-updater but failed, so I went to the webpage and download the latest installer.

MultiCommander_x64_(15.4.0.3088).exe
MD5: 140a68bf6c281779e0838e044d614ec7
https://www.virustotal.com/gui/file-analysis/MTQwYTY4YmY2YzI4MTc3OWUwODM4ZTA0NGQ2MTRlYzc6MTc0NDg4MDAxMQ==

and clicked on upgrade.

It seems that Microsoft Security Essential is detecting it as a Virus: Wacatac.

Likely a false positive, worth to investigate in case it is not, and also to see if it can be done something to remove the false positive, whilst I can uncuarantine at home, I won't be able to do that at my work computer.

[Mathias (Author)]

Its false positive. again.
It is almost impossible to get a 100% clear score on virus total. specially for a program that do lots of file stuff. like a file manager.. For AV software that looks suspicious. normally the warning goes away after a couple of day. There is not much I can do.

If like 20+% of scanners on virtual total starts reporting an issue. than It might be an issue.

[Mathias (Author)]

Windows did not complain for me on any of my other machines when doing an Update.

You can try to download the portable and see if it still complains.  Might be that it complains because of the installer.

[Skylight0502]

I imagined, I was just informing in case there was something that could be done.

Thank you!

[wynford]

I got the same thing... I have never noticed that before in other updates.

[Matthias515566]

I have F-Secure and updated to 15.4 using MultiUpdate without any problems.

[CharlieCharlie]

Hi Matthias

As mentioned in my other thread re. splash screen, I got a blocking message as well, after updating MC.
Using MySecurity from Swisscom which in fact is F-Secure (Version 25.2 - and they themselves use Avira Endpoint Protection Client), it blocked MC's exe file and when looking up the reason for that it linked to F-Secure's web page for an entry of Drop.Win64.FakeProgSelfRun.31090 ...

As said there, this came with the upgrade.
When, afterward, installing the portable version from 'scratch', F-Secure didn't complain and all is well with the exception of the splash screen.

This just FYI in case that helps.
I am still using Windows 10 Pro 22H2...

Charlie

[GaryM]

I had the same issue with Windows Defender, and a deeper dive reveals that the only executable flagged was the MultiCommander updater. Two shortcuts pointing to that file were also flagged. The main program passed just fine...

[Mathias (Author)]

Hi Matthias

As mentioned in my other thread re. splash screen, I got a blocking message as well, after updating MC.
Using MySecurity from Swisscom which in fact is F-Secure (Version 25.2 - and they themselves use Avira Endpoint Protection Client), it blocked MC's exe file and when looking up the reason for that it linked to F-Secure's web page for an entry of Drop.Win64.FakeProgSelfRun.31090 ...

As said there, this came with the upgrade.
When, afterward, installing the portable version from 'scratch', F-Secure didn't complain and all is well with the exception of the splash screen.

This just FYI in case that helps.
I am still using Windows 10 Pro 22H2...

Charlie

And The Installer, Update package and Protable.  The binary files are exactly the same.. and somehow some AV only complain on some of them.

Trying to avoid false positive are a mess. There is not much as a small developer you can do about that more then hope that the AV vendors fix it in next AV update.. For each release there is alywas some that complain at first. but after a week or two the warning often goes away. that why Im trying not to push out releases too often becuse there are always some AV issue with some vendor.

[User_99]

Also NO complain here after update.