Flagged as malware on VirusTotal

Development
1

All recent versions of Joplin Portable (for Windows) are flagged as malware by at least one security vendor on VirusTotal (for instance, v3.0.14).

Is there anything we can do about that?

2

It is worth noting that this keeps happening even several versions later (v3.1.24).

The same problem happens for all versions in between; if you are interested, I can post their links here (I just wanted to avoid spamming the forum with too many links).

3

This is not a bug in Joplin but in the virus scanner so that's where it should be reported. The more it's being reported, the more likely the vendor will fix their virus signature database.

2 Likes
4

I completely agree that it is not a bug in Joplin.
I have already reported it a few times, and I will continue to do so. I hope others will do the same :wink:

I wrote here just to point out this issue so that if someone knows how to "tweak" the code for Windows to prevent this problem (I don't know if it exists), we could avoid that in the future.

3 Likes
5

A quick update on this.
Unfortunately, it continues to occur even in the latest version v3.2.13.

In the "Dropped Files" section of the Relations tab you can see a single file with one detection:

1/72
Win32 DLL
node_sqlite3.node
SHA-256: 7fb52b781709b065c240b6b81394be6e72e53fe11d7c8e0f7b49dd417eb78a01

I am unsure whether this can help to identify/resolve the potential issue; hopefully someone with more expertise can assist.

6

For reference, I'm linking to the node SQLite3 GitHub project: