JPEXS Free Flash Decompiler Issue Tracker

If you are looking for the decompiler itself, visit https://github.com/jindrapetrik/jpexs-decompiler

NEW : We have got a new blog where we post some interesting SWF internals info.

List of issuesList of issues

#2429 ffdec has a problem with VirusTotal again
Author: user shellfish
Date created:
Type: other
Visibility: Everybody
Assigned to:
Labels: VirusTotal
State: opened Help

Checking the latest version (22.0.2) with the Windows installer yielded a significant 12 out of 57. https://www.virustotal.com/gui/file/e60a44314e1b581b5ba8ad602d37af8a8f88eb02ed70c9cdfad1f0 03aa4f93c0
admin
We use NSIS installer and the build system always downloads the newest version. Unfortunately, the antiviruses flag many of the NSIS features as malicious. That's caused by the nature of the installer - it install things, unpacks to the disk. The NSIS installers are used also by many viruses (like other installers). The AVs must make hard decisions, which parts of the NSIS are "malicious" and which not. Many not-so-known AVs do this decision based on some AI, which is imperfect. As I said in other related issues: We do not put anything harmful in the decompiler or in the installer. The source code is freely available on our Github, anybody can check. The NSIS is also open source. Here is some info from NSIS itself about its false-positives: https://nsis.sourceforge.io/NSIS_False_Positives They suggest to report any false-flagged installer to the vendors of the AVs, in the past I tried this, but some AVs do not really want to communicate with you, and also I guess we would need to repeat this on every release. 12 FP is pretty large number, I am thinking of using MSI (Windows installer) instead of the NSIS, I tried some experiments with it already, but it seems to be not very intuitive... And its build system is not available for Linux, which is bad. You can use the zipped version of FFDec instead of the installer, it is pretty same thing, just without shortcuts in Startmenu. That should not had any problem in antivirus. (only some obscure ones) I should put this info somewhere in the FAQ, many people would have the similar question.
State: new→opened