Kaspersky Detects Program as "Malicious" After Extracting

[sammyrms1]

I tried the latest version of ASU, extracted various sprites, and after extracting, Kaspersky detected that this program was doing something "malicious". Are there any viruses hiding in your program or is it just a false positive?

[ForkandBeard]

It's a false positive, but then I guess I would say that.

This is the first time I've had this issue reported. The code in question is here (extracting the sprites): Alferd-Spritesheet-Unpacker/ASU/UI/MainForm.cs in method ExportUnpackers. It does a few things Kaspersky might not like:

• deletes temp files
• starts another application (NConvert.exe)
• starts an instance of windows explorer

I'm not sure how to prove it's a false positive unless someone takes the time to review:

Alferd-Spritesheet-Unpacker/ASU/UI/MainForm.cs

[anaseskyrider]

I suggest using a website called "Virustotal.com", and using that to scan individual files, or compressed folders. So if you're not sure if it's safe, what the website does is lets you upload a file (or a compressed folder) and then it'll scan it with like 50+ different virus and malware scanners. So you can eliminate whether or not it's a false-positive, since different programs may catch something that your current one didn't. I use AVG, and I've scanned files that AVG said were okay, but a ton of different scanners said were bad.

[ForkandBeard]

That's a good suggestion, thanks @anaseskyrider, VirusTotal.com seems cool.

ASU_17.zip has just been scanned by 56 anti virus applications and 0 detected any problems:
VirusTotal.com antivirus scan results for ASU_17.zip

I think that's confirmed. Sweet.