Author Topic: HJWasm 2.17 is out with false positives  (Read 4518 times)

LiaoMi

  • Member
  • ****
  • Posts: 649
HJWasm 2.17 is out with false positives
« on: December 05, 2016, 06:19:20 PM »
Hallo,

attached picture is from my NOD anti-virus, both versions are blocked //  ::) :biggrin: Release date 01/12/2016
What could it be?


hutch--

  • Administrator
  • Member
  • ******
  • Posts: 6958
  • Mnemonic Driven API Grinder
    • The MASM32 SDK
Re: HJWasm 2.17 is out with false positives
« Reply #1 on: December 05, 2016, 11:22:58 PM »
Test the file on Jotti to see if anything else has the problem.
hutch at movsd dot com
http://www.masm32.com    :biggrin:  :skrewy:

habran

  • Member
  • *****
  • Posts: 1220
    • uasm
Re: HJWasm 2.17 is out with false positives
« Reply #2 on: December 05, 2016, 11:59:22 PM »
I can assure you that there is no any kind of malware in those files. Browsers are stupid :(
I hope Johnsa will be able to find solution for that :dazzled:
Cod-Father

habran

  • Member
  • *****
  • Posts: 1220
    • uasm
Re: HJWasm 2.17 is out with false positives
« Reply #3 on: December 06, 2016, 12:16:18 AM »
I have downloaded source from GitHub and built it and it runs flawlessly.
If you want I can post both builds here until we find solution for Teraspace builds.
Cod-Father

TWell

  • Member
  • ****
  • Posts: 748
Re: HJWasm 2.17 is out with false positives
« Reply #4 on: December 06, 2016, 12:21:48 AM »
These examples are the problem.
http://masm32.com/board/index.php?topic=5790.msg61765#msg61765

Better just to remove those.

johnsa

  • Member
  • ****
  • Posts: 799
    • Uasm
Re: HJWasm 2.17 is out with false positives
« Reply #5 on: December 06, 2016, 03:56:29 AM »
Hi all, it's been a bit of a struggle.. first Google blocked me... then my ISP blocked me... then my hosting provider blocked the site!!

I have now gotten the ISP sorted and hosting provider. I have updated the hjwasm archive on the site to remove all the examples and it has a clean bill of health from virustotal.com
I've alerted Google to this update and am awaiting their security review. Hopefully it should all be back to normal shortly.

John

Vortex

  • Member
  • *****
  • Posts: 2090
Re: HJWasm 2.17 is out with false positives
« Reply #6 on: December 06, 2016, 04:32:18 AM »
Hi LiaoMi,

A lot of antivirus software are nothing more than a pain. They can be useless.

johnsa

  • Member
  • ****
  • Posts: 799
    • Uasm
Re: HJWasm 2.17 is out with false positives
« Reply #7 on: December 06, 2016, 08:20:30 PM »
Hi all,

All the security issues have been resolved and the site is back to normal.

Thanks,
John

anunitu

  • Member
  • *****
  • Posts: 1117
Re: HJWasm 2.17 is out with false positives
« Reply #8 on: December 06, 2016, 11:57:44 PM »
Actually not surprised. A long time ago there was a program that was supposed to "detect" bad hacker stuff by name,and the list included a hex editor,a dis assembler,and other dos programming tools. The program was kind of like the child safety ones that list "Bad" sites not by actual evidence,but in a manner like how "Harry Potter" books were judged by the religious paranoid types.

Even to if the author has a name that is even sort of looking like another name,or a person reports a site because their sisters boyfriends cousins best friends hookups dealer said they were bad. Grapevine thing.

LiaoMi

  • Member
  • ****
  • Posts: 649
Re: HJWasm 2.17 is out with false positives
« Reply #9 on: December 07, 2016, 12:30:01 AM »
Hi All,

I know that with the images everything is in order, I wanted to draw attention to the fact, that it is difficult to download files. For example, on another computer, I could not download, even when the antivirus software is disabled, it was the Symantec Antivirus. At that moment I was not able to check all the files separately, so I wrote here ...

Quote
A lot of antivirus software are nothing more than a pain. They can be useless.

That's right, just sometimes it saves time  :P

Quote
\Win32_8.EXE  Win32:Evo-gen[Susp]

This file is detected in today's build as malicious =)

GoneFishing

  • Member
  • *****
  • Posts: 1071
  • Gone fishing
Re: HJWasm 2.17 is out with false positives
« Reply #10 on: December 07, 2016, 12:50:07 AM »
Hi,
To stop this never-ending fun around false  positives I see one simple and obvious solution  :
distribute your product in source only form without compiled binaries. After all *JWASM is not for beginners 

TWell

  • Member
  • ****
  • Posts: 748
Re: HJWasm 2.17 is out with false positives
« Reply #11 on: December 07, 2016, 12:56:48 AM »
Only x86 package have those difficulty examples, x64 package is now clean of them.
There are nothing wrong with hjwasm32.exe/hjwasm64.exe.
People need those binaries.

johnsa

  • Member
  • ****
  • Posts: 799
    • Uasm
Re: HJWasm 2.17 is out with false positives
« Reply #12 on: December 07, 2016, 02:10:52 AM »
I will clean the 32bit package and re-upload asap.

John

anunitu

  • Member
  • *****
  • Posts: 1117
Re: HJWasm 2.17 is out with false positives
« Reply #13 on: December 07, 2016, 02:35:12 AM »
Hi,
To stop this never-ending fun around false  positives I see one simple and obvious solution  :
distribute your product in source only form without compiled binaries. After all *JWASM is not for beginners

That might be a solution for those who have a compiler to build the code. Kind of why I like open source.

LiaoMi

  • Member
  • ****
  • Posts: 649
Re: HJWasm 2.17 is out with false positives
« Reply #14 on: December 07, 2016, 09:54:50 PM »
  :redface:

This site can’t be reached

www.terraspace.co.uk’s server DNS address could not be found.
Search Google for terraspace co uk jwasm
ERR_NAME_NOT_RESOLVED