VirusTotal results on file

[pomptondrive]

Got hits (HW32.Packed.E704 | Suspicious_GEN.F47V1021) from VirusTotal, when I downloaded NodistSetup-v0.8.8.exe today. How can I know whether these are false positives?

[marcelklehr]

Hello @pomptondrive

The installer is known to be erroneously detected by some anti malware software. Besides building it yourself, I don't know (and even then, you'd have to read the sources of all programs involved to really know). You need to trust the following entities:

Trust your browser. Trust your Operating system. Trust TLS encryption. Trust github and github's CA to not get github's tls breached. Trust github to store the installer securely, without modifications. Trust my operating system. Trust my browser. Trust me to have uploaded the correct installer. Trust the NSIS version on my machine to not do anything insecure. Trust me to have built the installer from the right sources (the ones you see published in this repo).

That being said, you can perform the steps the installer does manually: [1] [2]

[pomptondrive]

Thank you. I appreciate your work! I just wanted to touch base, as I had to jump through many hoops to get admin privies on my agency's computer. I figured it to be false positives, but I thought you might also want to be aware. Have a great New Year! - dk