Setup.exe considered malware or a virus
denshade opened this issue · 2 comments
According to chrome and firefox the release setup.exe and zipfile contains a virus/malware.
Thanks for letting me know.
I think its due to the use of the Tarma InstallMate 9 Installer which uses stubs to put the installer together. I noticed these loaders and stubs are flagged via Adlice RogueKiller as well.
I uploaded the following files to VirusTotal to see what it shows - with detections in brackets:
- RadASM-2.2.2.4-Setup.exe (7): https://www.virustotal.com/gui/file/90a4500cba826650b74fa32c4d9a4bf01dd2042d09d432c5cd89648f1e150a19/detection
- RadASM-2.2.2.4-IDEOnly.zip (2): https://www.virustotal.com/gui/file/a9c3bad172ff538b1c66d412d6a0dee0af3ef5233cc85c056a9cec06c622eb6d/detection
- Assembly.zip (1): https://www.virustotal.com/gui/file/24e8751938c7bed24ad8820d1004cdbd76443e71460032ec13150dea48fee70a/detection
- Highlevel.zip (13): https://www.virustotal.com/gui/file/00afa7206b7ad53c4cc69915c12ea2ed96564892b3a183ee9c9404ed942ee17b/detection
- Language.zip (0): https://www.virustotal.com/gui/file/5c97a38733ccbd27146187df63e059d6135f1ef7c65d291384654e58dca91f4a/detection
- RAHelp.zip (0): https://www.virustotal.com/gui/file/cc8313e4f72fe92a3519b8ee65989826278a4c4ab63f4e99c055f3dc5a0f93a1/detection
- RadASM-2.2.2.4-FullPackage.zip (16): https://www.virustotal.com/gui/file/4cfac1dcc3595e898734cdfcaaeda397287c986de4a9b57d657de47dff05e054/detection
Highlevel.zip only has text files for supporting higher level languages (c++, freebasic, bcc etc), but does come with sample projects, but none are compiled, so i'm unsure why this one is heavily flagged. RadASM-2.2.2.4-FullPackage.zip is just a combination of all the zips (which includes Highlevel.zip so that would explain why that one is also flagged due to the inclusion of the contents of Highlevel.zip).
I suspect a lot of false positives especially in the RadASM-2.2.2.4-IDEOnly.zip and Assembly.zip.
I you only need assembler support then downloading the RadASM-2.2.2.4-IDEOnly.zip and then the Assembly.zip, Language.zip, RAHelp.zip files and extracting to the same folder where RadASM.exe is should give you a working version.
An older version of RadASM v2.2.2.0 is available here as an alternative: https://www.softpedia.com/get/Programming/File-Editors/RadASM.shtml
Removed the Tarma InstallMate Setup.exe files - suspect they may be infected. So for safety I am removing them.