Detection of false positive virus in WebTorrent download
andresgarcia0313 opened this issue · comments
Detection of false positive virus in WebTorrent Desktop download
Problem Description:
When downloading the WebTorrent application, some users have reported that their antivirus programs detect a supposed virus with the label "JTI/Suspect.196612!e3921e5c2119" according to McAfee. However, we believe this is a false positive, as the software in question does not exhibit any malicious behavior, and no evidence of harmful activity has been found.
Versions used:
The exact version of WebTorrent being used is 0.24.0, to identify the origin of the problem.
Problem to solve:
The problem we want to address is the erroneous detection of viruses by antivirus programs when downloading WebTorrent. Although we understand the importance of security programs, in this case, we believe a false positive is being generated, possibly related to a library being used, and this affects users' trust in the software.
Proposed solution:
We suggest investigating and analyzing in detail why some antivirus programs, particularly McAfee, are flagging the download of WebTorrent as a possible virus. Additionally, it is essential to communicate with the developers of McAfee to inform them about this situation and provide evidence that WebTorrent does not pose a real threat. Alternatively, modifying the code or the third-party library being used could also be considered.
Thank you very much for your attention to this matter.
When analyzing the source code without installing third-party libraries or using npm, it does not detect viruses
The code that I analyzed with mcafee is from this repository, I don't know if it is the same as webtorrent desktop
Avast also says "FileRepMalware".
I've added it to exceptions for now since i've been using webtorrent for years without a problem, but it's still a bit disconcerting.
Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?