Multiple Vendors False Positives

[liamengland1]

FYI -- The most recent artifact of WhyNotWin11_x86.exe is flagged as a virus (Program:Win32/Wacapew.C!ml) by Microsoft/Windows Defender.

https://www.virustotal.com/gui/file/d93b3da670d96e80d2a3ec0bbea61f7b33b974604a723f3791b515204cc41337/detection

---

More info on autoit forums
https://www.autoitscript.com/forum/topic/34658-are-my-autoit-exes-really-infected/

[micwoj92]

These false positives are known issues, just report file as safe and hope that they fix it.

[rcmaehl]

It appears both of these vendors only accept FPs via email. I've contacted both. If you've been pointed here, feel free to contact them as well, but it can take several hours - couple days per release to get whitelisted, if at all.

Contact BKav - Attachment must be .7z file with password "infected"
Contact Sophos - Attachment must be .zip file with password "infected"

[rcmaehl]

This should be partially improved with the removal of requiring admin rights

[XUTOS83]

Bkav Pro
W32.FamVTAppLQNE.Trojan

Sophos
Generic ML PUA (PUA)

Palo Alto Networks
Generic.ml

https://www.virustotal.com/gui/file/4505a6ed4a5f8a7401d17f76ee8ba73340de5e2905fee2c6c8551d0852d29e9c/detection

[micwoj92]

The issue will stay pinned but I'll close it, because it's not really something that can be fixed. Just report as false positives. Also the releases will be less often, so the executables from releases will have more time to get unflagged and get good scores on virustotal.

[TruongTanLuc201270]

Version 2.6.0.0, 2 virus found