f-secure reports UEFReader as being infected.

[PeterBBCUser]

f-secure reports this as containing "W32/Malware!DeepGuard"
https://www.f-secure.com/v-descs/w32-malware.shtml
and blocks the program.

[geraldholdsworth]

Which version is reported to be infected?

[PeterBBCUser]

the Windows version ver 1,3,0,0 which as far as I could see what the latest version of it.

[geraldholdsworth]

32 or 64-bit version? Not sure how it would have got infected as these executables have never seen a Windows machine until they are downloaded onto a Windows machine. They are all compiled on a virus protected macOS machine. From: Peter ***@***.***> Reply to: geraldholdsworth/UEFReader ***@***.***> Date: Monday, 10 July 2023 at 16:40 To: geraldholdsworth/UEFReader ***@***.***> Cc: Gerald Holdsworth ***@***.***>, Comment ***@***.***> Subject: Re: [geraldholdsworth/UEFReader] f-secure reports UEFReader as being infected. (Issue #1) the Windows version ver 1,3,0,0 which as far as I could see what the latest version of it. — Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you commented.Message ID: ***@***.***>

[PeterBBCUser]

the CRC32 is the same in the zip as the unpacked version
TurboSFV (v8.21.8201) - Hash values

---

Calculation date: 2023-07-11 18:16:23
File: UEFReader.exe
Path: D:\Downloads
Size: 2.65 MB (2,774,016 Bytes)
CRC-32: 0a944f33
MD5: 83b0ab79c9dd00d0e72b40df665fc4af
SHA-1: 6fb02964dc08cfaeb7889c3e6692b2dcb58582f7

---

I guess its the 64 bit version as it does not say 32bit on the file I down loaded, just "UEF Reader".

[geraldholdsworth]

Hi Peter.
I've checked with the recently compiled version against the version that was uploaded to here, and a copy of it I downloaded from here and they all check out with identical CRC32. I don't have a Windows machine to run a full virus check on it, but I'm going to guess that as it is compiled on a Mac, zipped up on a Mac and uploaded from a Mac then it won't have any Windows viruses infecting it. It could very well be a false positive. Do any other binaries from my other projects exhibit the same behaviour?
Cheers,
Gerald.

[PeterBBCUser]

Hi Gerald,
I as not trying to imply it is infected only that f-secure reports it as containing a virus, I am also sure its a faults positive report but just want to pass that information on and I will check some of the others to be hones I have not done that to see if they also get reported as being infected.just tried your folowwing exe DiscImageManager.exe, FileDump.exe and RISCOSPaint.exe and none of them give a problem