Reply to thread

Message

<blockquote data-quote="Charismagic" data-source="post: 1057989" data-attributes="member: 26886">The only software used to uninstall was Uninstalr, which showed these leftovers. And no, the paths did not point to system entries.Do understand the issue of false positives and it can mar a products reputation, which is unfair. You have used UPX packers in the application but entry point UPX 01 has a very high entropy - 7.92 plus (according to Shannon&#039;s entropy scale between 0 and 8 typically used by malware, since it is a measure of randomness for the purpose of obfuscation)It is also hooking into wsock.dll and network comms, specially using a raw socket API??&nbsp; I can understand your need to gather data to figure out how the software is performing, and I hope it&#039;s nothing more, but that being the case, maybe you should specify what your program collects as information and its usage at your end, in the interests of transparency for a free software and credibility. Just a suggestion.</blockquote>

[QUOTE="Charismagic, post: 1057989, member: 26886"] The only software used to uninstall was Uninstalr, which showed these leftovers. And no, the paths did not point to system entries. Do understand the issue of false positives and it can mar a products reputation, which is unfair. You have used UPX packers in the application but entry point UPX 01 has a very high entropy - 7.92 plus (according to Shannon's entropy scale between 0 and 8 typically used by malware, since it is a measure of randomness for the purpose of obfuscation) It is also hooking into wsock.dll and network comms, specially using a[B] raw socket[/B] API?? I can understand your need to gather data to figure out how the software is performing, and I hope it's nothing more, but that being the case, maybe you should specify what your program collects as information and its usage at your end, in the interests of transparency for a free software and credibility. Just a suggestion. [/QUOTE]

Verification