[False positive] VirusTotal Alerts SynfigStudio-1.4.5.exe

[RebelBuho]

Hello everyone.

I recently downloaded SynfigStudio-1.4.5.exe from Gumroad and Github, The file from both sites throws me some alerts on total virus.

2/ 65
Fortinet
W32/PossibleThreat
Ikarus
Trojan.Shelma

VirusTotal

[BobSynfig]

Same as here, please read the previous topics before to publish here.
I received this as potential spam in moderation queue, I allowed it to avoid any doubt.

[False positive] Malware in the installer

Título: Posible Malware Detected in the Synfig Studio Installer Descripción: Hi Synfig team I wanted to inform that when i wanted to download the last version of Synfig Studio from the official page, my antivirus software detected a troyan malware, i checked it with a webpage named virus total and said it too Operative System: Windows How did I installed it: 1 I entrered the official page https://www.synfig.org/ 2. I clicked the download stable version button 3. I downloaded the installe…

As a reminder, Synfig is free and open-source, as well as its build system.
You can inspect everything and compile it yourself.

2 out of 65 alerts doesn’t mean anything but that the 2 specific AV engines aren’t discriminant enough

[smokeytiger]

Strange thing it went from two viruses to four. It has doubled. Not sure if that can truly be considered safe to use any longer.

[BobSynfig]

@smokeytiger

Strange thing it went from two viruses to four. It has doubled. Not sure if that can truly be considered safe to use any longer.

“Not sure if that can truly be considered safe” to trust some random unknown outsider antiviruses while the major commercial ones don’t detect anything.
Unless you receive an alert from something more serious like Kaspersky, BitDefender or Norton, don’t believe software that wouldn’t detect an EICAR pattern.

Synfig is open-source, as is its toolchain and all the recipes to build it …
I invite you to inspect the source code and build it yourself.

[smokeytiger]

True True.

Ty for the reply.