Android Question virustotal.com detect Ikarus: Trojan-spy.androidOS.Agent for classes.dex file

[Zoran Vujacic]

Hi everyone,

Same problem like:
https://www.b4x.com/android/forum/t...spy-androidos-agent-on-my-apk.160887/#content


On virustotal.com if you try to check any the classes.dex created in B4X it reports
https://www.virustotal.com/gui/file...c92e126046fe125f302bb4117b7c677ed66?nocache=1

I sent a request to be whitelisted but can anyone else check if they have the same problem?

for false positive requests I am using: https://docs.virustotal.com/docs/false-positive-contacts

 

[Zoran Vujacic]

I am not sure but it look this lib AppCompat is problem: https://www.b4x.com/android/forum/t...compatible-with-older-android-versions.48423/

 

[Zoran Vujacic]

Yes 100% reason is AppCompat libary

 

[Erel]

There are no viruses in AppCompat. This is a false positive.

 

[Zoran Vujacic]

Thanks Erel,
I sent a false positive request to Ikarus and Google, now I'm waiting.
Avast-Mobile, AhnLab-V3 also reported but accepted the false positive request.
Windows Defender (if you download the distribution or original *.apk from Google Play Console to the computer). Windows Defender does not report more than the last update of the virus database (I wrote to them too).
Maybe I'm wrong, but I've noticed that some mobile antivirus programs start reporting viruses as if they're copying each other's databases. At one point, 5 of them were reporting classes.dex.