Virustotal false positive on AltDrag 1.44 software

[RamonUnch]

I am a developer of the AltDrag software that allows you to move/resize windows with the Alt+Click combo like under Linux. Main page here:

https://github.com/RamonUnch/AltDrag

Latest release 1.44 can be found here: https://github.com/RamonUnch/AltDrag/releases/download/1.44/AltDrag1.44-inst.exe

It seems that "Palo Alto Networks" antivirus improperly flags the file with the "Generic.ml" flag.

File Hash: 0C587691DFD2BB5A65D54EF6B7BE36997EDAB98B55E3AB1D4A0508DA8602A48F

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/0c587691dfd2bb5a65d54ef6b7be36997edab98b55e3ab1d4a0508da8602a48f...

Current VirustTotal Verdict: Generic.ml

Description: I am 100% sure it is a false positive as I am the main developer of the program and I make the builds myself.

AltDrag does hook the mouse and keyboard to enhance the window management. This is probably why it may look suspicious to some anti-viruses.

Note that I had a similar false positive issue with the previous version (AltDrag 1.43) that was quickly resolved.

It is a problem for some of my users and I would be grateful if you could investigate this and suppress this false alert.

Thanks in advance

[RamonUnch]

I am a developer of the AltDrag software that allows you to move/resize windows with the Alt+Click combo like under Linux. Main page here:

https://github.com/RamonUnch/AltDrag

Latest release 1.44 can be found here: https://github.com/RamonUnch/AltDrag/releases/download/1.44/AltDrag1.44-inst.exe

It seems that "Palo Alto Networks" antivirus improperly flags the file with the "Generic.ml" flag.

File Hash: 0C587691DFD2BB5A65D54EF6B7BE36997EDAB98B55E3AB1D4A0508DA8602A48F

Link to Virustotal report for the file: https://www.virustotal.com/gui/file/0c587691dfd2bb5a65d54ef6b7be36997edab98b55e3ab1d4a0508da8602a48f...

Current VirustTotal Verdict: Generic.ml

Description: I am 100% sure it is a false positive as I am the main developer of the program and I make the builds myself.

AltDrag does hook the mouse and keyboard to enhance the window management. This is probably why it may look suspicious to some anti-viruses.

Note that I had a similar false positive issue with the previous version (AltDrag 1.43) that was quickly resolved.

It is a problem for some of my users and I would be grateful if you could investigate this and suppress this false alert.

Thanks in advance

[hisingh]

Hello @RamonUnch 

This sample has been submitted to review. We will update soon

Himani

[hisingh · Accepted solution]

Hi 

This has been disabled 

Himani