Version 2.3.29 beta for Windows - download error

Any issues related to FORScan application
tungsten81
Posts: 11
Joined: Mon Jan 21, 2019 8:52 pm
Vehicle: Ford Fiesta ST 1.5 Dragon MY19

Re: Version 2.3.29 beta for Windows - download error

Post by tungsten81 »

f-wolf wrote:
Fri Feb 07, 2020 12:32 am
This is a false positive. Reason for false positive is that we use special binary packer ASProtect to pack the executable (to protected it against cracking), this technique is similar to the one used by some malware.

You can check the file or distributive using some online service (e.g. virustotal.com) to make sure that absolute majority of antivirus do not consider it a virus.
Do you understand that this situation is very bad?

FORScan 2.3.28 was not recognized by a single AV engine on virustotal.com:
https://www.virustotal.com/gui/file/eb4 ... /detection

Neither were 2.3.27...
https://www.virustotal.com/gui/file/361 ... /detection

...nor 2.3.26...
https://www.virustotal.com/gui/file/da1 ... /detection

...nor 2.3.25...
https://www.virustotal.com/gui/file/016 ... /detection

So why is 2.3.29 classified as malware when you use the same binary packer for years now?

I even triggered a reanalysis on virustotal of 2.3.28 with the current versions of the scan engines. No detection!

Sorry, but I don't understand this. Deactivating AV scanners is not an option to me.

If there's no fix for this by the FORScan developers, I'll wait and check the subsequently released versions instead of running 2.3.29.
tungsten81
Posts: 11
Joined: Mon Jan 21, 2019 8:52 pm
Vehicle: Ford Fiesta ST 1.5 Dragon MY19

Re: Version 2.3.29 beta for Windows - download error

Post by tungsten81 »

@f-wolf so you don't care?!
User avatar
fordsmax471
Posts: 1187
Joined: Mon Aug 07, 2017 5:29 pm
Vehicle: Ford S-Max 2.0 TDCi 2017 PowerShift

Re: Version 2.3.29 beta for Windows - download error

Post by fordsmax471 »

tungsten81 :!:


if you look at the FORScan log file, you understand
there is one more line added
and the FORScan team is absolutely right for that ;)
tungsten81
Posts: 11
Joined: Mon Jan 21, 2019 8:52 pm
Vehicle: Ford Fiesta ST 1.5 Dragon MY19

Re: Version 2.3.29 beta for Windows - download error

Post by tungsten81 »

fordsmax471: what are you talking about? what logfile, what line? I don't understand, sorry.
I thought we were talking about the latest FORScan release exe being classified as malware by 14 of 70 scan engines on virustotal.com.
the statement of f-wolf was that it's due to using ASProtect and that they are using this for a long time now.
I'm wondering why the previous 4 FORScan release exe files weren't classified as malware in this case as they were seemingly also protected using ASProtect.
VA7XJC
Posts: 10
Joined: Sat Nov 23, 2019 9:41 pm
Vehicle: Ford F150 5.4L 2009

Re: Version 2.3.29 beta for Windows - download error

Post by VA7XJC »

Downloaded version 2.3.29 beta for Windows on Feb. 10, 2020 with no download problems.

I put it through the most updated Windows Defender for Win 10 Pro with all recent updates and no threats were detected.

I also ran a complete online remote virus scan with Kaspersky today and here are the results:

Kaspersky Anti-virus
No threats detected in FOR​S​c​a​n​S​e​t​u​p​2​.​3​.​2​9​.​b​e​t​a​.​exe
Scan result no threats detected File size 27.80 MB File type PE32/EXE
Scan date Feb 10 2020 10:04:29
Databases release date Feb 10 2020 16:49:30 UTC
MD5 7d435263f4e815032daddc1f4d887df3
SHA1 07975f6e87387ffb3a36267944a677b67176aa74
SHA256 157e035e18909051257f56aec8cbd8c480d777adbc6f99c148bbdb05024e838f

It appears some persons may be running virus scanners that are reporting false positives, this is becoming far more common as the efforts to thwart viruses are now using AI software embedded in most virus programs which can indicate a false positive in many packages including Microsoft software.

:geek:
tungsten81
Posts: 11
Joined: Mon Jan 21, 2019 8:52 pm
Vehicle: Ford Fiesta ST 1.5 Dragon MY19

Re: Version 2.3.29 beta for Windows - download error

Post by tungsten81 »

VA7XJC wrote:
Mon Feb 10, 2020 5:14 pm
Downloaded version 2.3.29 beta for Windows on Feb. 10, 2020 with no download problems.

I put it through the most updated Windows Defender for Win 10 Pro with all recent updates and no threats were detected.
That's very strange as Microsoft classifies it as "Trojan:Win32/Wacatac.C!ml" as you can see on https://www.virustotal.com/gui/file-ana ... /detection
So your Windows Defender should have detected it.
FORScan
Site Admin
Posts: 2835
Joined: Fri Jun 13, 2014 2:21 am

Re: Version 2.3.29 beta for Windows - download error

Post by FORScan »

Situation with v2.3.29 is really strange. Before release, we tested the distributive on virustotal.com and it did show us 1 out of 70 positives. Unfortunately, we have not made a screenshot. Now, when we upload the same distributive, it shows us 13 out of 70 positives. Last scan of 11 Feb (we scanned it on 04 Feb). Signature of the file is the same. We have 2 explanations:

1) Virustotal updated their DB right after we checked the v2.3.29 and that update contained some signatures that match to FORScan one
2) Somebody reported v2.3.29 as a file that contains the virus

We are going to release v2.3.30 soon as provide a screenshot of virustotal report.
FORScan
Site Admin
Posts: 2835
Joined: Fri Jun 13, 2014 2:21 am

Re: Version 2.3.29 beta for Windows - download error

Post by FORScan »

Update: We have found a way to submit a report to Microsoft and they removed FORScan signature from their database.
Analyst comments:

We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions

Thank you for contacting Microsoft.
Deejin
Posts: 3
Joined: Sun Jul 09, 2017 8:14 am
Vehicle: RangerT6-MC

Re: Version 2.3.29 beta for Windows - download error

Post by Deejin »

Hello, All,
I would like to confirmed, the forscan Version 2.3.29 beta still cannot resolved, (Same error)
By the way, just new release with the Version 2.3.30 that this problem was resolved.
So, the guy who still have this problem should be trying to updated to this lasted version.
Thank you,
tungsten81
Posts: 11
Joined: Mon Jan 21, 2019 8:52 pm
Vehicle: Ford Fiesta ST 1.5 Dragon MY19

Re: Version 2.3.29 beta for Windows - download error

Post by tungsten81 »

FORScan wrote:
Tue Feb 11, 2020 10:04 am
Situation with v2.3.29 is really strange. Before release, we tested the distributive on virustotal.com and it did show us 1 out of 70 positives. Unfortunately, we have not made a screenshot. Now, when we upload the same distributive, it shows us 13 out of 70 positives. Last scan of 11 Feb (we scanned it on 04 Feb). Signature of the file is the same. We have 2 explanations:

1) Virustotal updated their DB right after we checked the v2.3.29 and that update contained some signatures that match to FORScan one
2) Somebody reported v2.3.29 as a file that contains the virus

We are going to release v2.3.30 soon as provide a screenshot of virustotal report.
Thank you very much!
Post Reply