I've developed a B4J application that is distributed as both JAR file and a Windows Packaged (portable) application.
After some user reports, I've tested the executable at https://www.virustotal.com/
This is the result.
Is this something to be expected?
How can I prevent this?
B4J packages apps do not contain anything other than: your code + libraries + Java runtime.
Protection software are always suspicious when they encounter a new executable. Especially when it is unsigned. Signing it with a software certificate will help.
If I remove the two executable (from build folder and from bin subfolder), the app work as expected with run_debug.bat and no issues reported.
I will stay with the bat file for the moment, as I cannot afford for the moment to get a code signing certificate to be used in Windows.