Virustotal flags Installaware Setups as malicious!
Posted: Sat Jul 29, 2023 4:50 am
It looks, as switching to Installaware 15 from an older version (pre 14) does trigger Virustotal security alerts for all setups produced via Installaware:
Test-Case1: Simple InstallawareTest project with one text file (attached). Just copy the 2 folders in the attached 7z file to c:\temp\ and build a Single Setup.exe. Then upload the resulting setup to virustotal.com. The result will show alerts and look like: https://www.virustotal.com/gui/file/c45 ... 4183b22a94
Test-Case2: Upload the newest Installaware Public Trial Setup (Web-Install) InstallAware_X15.exe. The result will show alerts and look like: https://www.virustotal.com/gui/file/422 ... 1c890020fe
Test-Case3: Compare with other installers e.g. a Microsoft Office Setup: https://www.virustotal.com/gui/file/0ac ... 2a0c18e371
= no alerts
Some of our customers do not accept our install! They demand that we have to fix the issue. But as Installaware is the supplier and has the same problem in their own setup, there is nothing we can do on our side beside switching the installer?!
What are the next steps? And as long other installers do not show these alerts, we cannot argue that the "Installer is OK and not a Trojan". The customers do just not accept with all the financial consequences for us!
Test-Case1: Simple InstallawareTest project with one text file (attached). Just copy the 2 folders in the attached 7z file to c:\temp\ and build a Single Setup.exe. Then upload the resulting setup to virustotal.com. The result will show alerts and look like: https://www.virustotal.com/gui/file/c45 ... 4183b22a94
Test-Case2: Upload the newest Installaware Public Trial Setup (Web-Install) InstallAware_X15.exe. The result will show alerts and look like: https://www.virustotal.com/gui/file/422 ... 1c890020fe
Test-Case3: Compare with other installers e.g. a Microsoft Office Setup: https://www.virustotal.com/gui/file/0ac ... 2a0c18e371
= no alerts
Some of our customers do not accept our install! They demand that we have to fix the issue. But as Installaware is the supplier and has the same problem in their own setup, there is nothing we can do on our side beside switching the installer?!
What are the next steps? And as long other installers do not show these alerts, we cannot argue that the "Installer is OK and not a Trojan". The customers do just not accept with all the financial consequences for us!