r/antivirus•
LUMANEX

W32.ALdetectVM.malware

Hey everyone, I've recently come across W32.ALdetectVM.malware that i found on an .exe by scanning it with Virustotal. Do i ignore it? Ive found it on 2 different torrents and thought it was pretty odd (at least i think its the same malware on both torrents)

Virus total didnt find anything with all of its detectors except for Bkav

Posted Apr 9, 2020, 9:34 PM UTC

15
StruppigelG DATA Malware Analyst•

Can you send the link to Virustotal.com for the particular file?

Generally the detection name says, it is flagged as malicious because the file detects virtual machines and runs differently in them. This is a common thing for malware to do, but clean programs do that too sometimes.

Torrenting on the other hand is very risky in terms of malware. Lots of file infectors and worms thrive via P2P file sharing.

1
LUMANEXOP•
1
EndangeredPootis•

Its only detected by one, never heard of before AV, use logic, if it was malware it would be detected by many more, particulary major ones such as Bitdefender, Kaspersky etc, not some unknown, probably bad antivirus, I have seen so many people like you post things like this im im getting so goddamn annoyed.

1
StruppigelG DATA Malware Analyst•

The file is from 2016. It would be detected by now if it was malicious. It's clean, so no worries.

1
LUMANEXOP•

Thank youuuuuu so much

1