소스 NSIS 설정은 바이러스가

Question

I NSIS 소스 설치 아약스 파일을 가지고 있고 내가 내가 어디에 모르는 바이러스에 도착 virustotal에 갈 때

나에게 파일을 차단하는 sameone 사용 파일 dll을 becose 인터넷 익스플로러를 청소 문제는 사람이 소스

; saudivoice NSIS Installer Script File 
; khaild Winston <babh532@gmail.com> 
;-------------------------------- 
;Include some predefined NSIS libraries 

    !include "WinMessages.nsh" 

; -------------------- 
XPStyle on 


; LANG: 1033 
LangString LSTR_43 1033 "Show &details" 
LangString LSTR_44 1033 Completed 
; -------------------- 
;General 

    ;Name and file 
    Name "SaudiVoice" 

    ;Default installation folder 
    InstallDir "$PROGRAMFILES\SaudiVoice" 

; -------------------- 
; PAGES: 3 

; Page 0 
Page license /ENABLECANCEL 
    LicenseText "Welcome to the Saudivoice Voice Setup." Next 
    LicenseData [LICENSE].txt 

; Page 1 
Page instfiles 
    CompletedText $(LSTR_44) ; Completed 
    DetailsButtonText $(LSTR_43) ; "Show &details" 

/* 
; Page 2 
Page COMPLETED 
*/ 
; -------------------- 


; -------------------- 
; SECTIONS: 1 

;Installer Sections 

Section "Install saudivoice" 

    SetOutPath "$INSTDIR" 

    ; Copy all of the required files (note the /r switch to recursively copy      directories) 
    File chat5.ocx 
    File chat5.dll 
    File chat5.inf 
    File setup.bat 
    File IMSVoiceStarter.exe 
    File npIMSChatStarter.dll 
    File Readme.htm 
    ; Register the COM server 
    ClearErrors 
    RegDLL $INSTDIR\chat5.ocx 
    RegDLL $INSTDIR\npIMSChatStarter.dll 
    Exec $INSTDIR\setup.bat 
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall\Uninstall.exe /S" 
    DetailPrint "unInstalling the Block..." 
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall14\Uninstall.exe /S" 
    DetailPrint "unInstalling the Block..." 
    Exec "$PROGRAMFILES\KSAChatControl2017\2.11.0.0\Uninstall.exe /S" 
    DetailPrint "unInstalling the Block..." 
    CreateDirectory $SMPROGRAMS\SaudiVoice 
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Read Me.lnk" $INSTDIR\Readme.htm 
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk"    $INSTDIR\Uninstall.exe 
    WriteRegStr HKLM  Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayName  "SaudiVoice 1.0.0.1" 
    WriteRegStr HKLM  Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayVersion 1.0.0.1 
    WriteRegStr HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice UninstallString $\"$INSTDIR\Uninstall.exe$\" 
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoModify 1 
    DeleteRegKey HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice 
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoRepair 1 
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}" 
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ModuleUsage" 
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDlls" 
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains" 
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}" 
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage" 
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls" 
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains" 
    DeleteRegKey HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges" 
    DeleteRegKey HKEY_CURRENT_USER "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges" 
    DeleteRegKey HKEY_USERS ".DEFAULT\Software\Microsoft\Windows Firewall" 
    WriteUninstaller $INSTDIR\Uninstall.exe ; $INSTDIR\$INSTDIR\Uninst.exe 
    SectionEnd 



    ; -------------------- 
    ;Uninstaller Section 

    Section "Uninstall" 

    Delete "$INSTDIR\Uninstall.exe" 

    ; Unregister the COM server 
    UnRegDLL "$INSTDIR\chat5.ocx" 
    Delete "$INSTDIR\chat5.ocx" 
    Delete "$INSTDIR\chat5.dll" 
    Delete "$INSTDIR\chat5.inf" 
      Delete "$INSTDIR\IMSVoiceStarter.exe" 
    Delete "$INSTDIR\npIMSChatStarter.dll" 
    Delete "$INSTDIR\Readme.htm" 
    ; Delete all installed files 
    RMDir "$INSTDIR" 

    ; And registry entries 
    DeleteRegKey HKLM  "Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice" 
    Delete "$SMPROGRAMS\SaudiVoice\Read Me.lnk" 
    Delete "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk" 
    RMDir $SMPROGRAMS\SaudiVoice 

    SectionEnd 

입니다

나에게 도움이 될 수 있습니다이 파일

http://saudidos.com/fix.exe 

,536입니다

도와주세요.

Answer 1

VirusTotal results의 검출율은 2/55이고 두 개는 Bkav와 Invincea이며 나는 사지에 나가 잘 알고있는 회사가 아니라고 말합니다. 이것은 아마 거짓 긍정. 당신은 reporting 위양성을 시도 할 수 있습니다 ...

Answer 2

이것은 first time이 아니며, 이것은 nsis 또는 일부 관련 plugins에 발생했습니다. 해당 기업 또는 virustotal ("정보 공유"장)에 알려 주시면 (단지 더 오래 걸릴 수 있습니다) ...