[FALSE-POSITIVE] virustotal.com seeing debugger detection?

[deftware]

https://www.virustotal.com/gui/file/cb3 ... 731efad903

I'm having users report that their antivirus is blacklisting my software that I've packaged with InstallForge and after putting it up on VirusTotal I'm personally concerned about some things:

Code: Select all

- Checks if the current process is being debugged

- AV process strings found (often used to terminate AV products)

- May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory)

These things don't seem necessary for an installer. Are they?

[markbell]

InstallForge does not contain any malware. These are false-positives. Have you code-signed your installer with a valid certificate?