ClamAV reports viruses found from rlottie's source

[juippis]

Hey,

when doing a scan with latest clamav, https://www.clamav.net/ against rlotties sources, it detects "Keyloggers".

----------- SCAN SUMMARY -----------
Known viruses: 8639436
Engine version: 0.105.1
Scanned directories: 43
Scanned files: 341
Infected files: 2
Data scanned: 44.32 MB
Data read: 23.65 MB (ratio 1.87:1)
Time: 11.913 sec (0 m 11 s)
Start Date: 2022:10:09 10:24:55
End Date: 2022:10:09 10:25:06

Scanning /tmp/rlottie/example/win32Player/rlottie.dll
/tmp/rlottie/example/win32Player/rlottie.dll: Win.Keylogger.Generic-9973679-0 FOUND

Scanning /tmp/rlottie/example/win32Player/rlottiePlayer.exe
/tmp/rlottie/example/win32Player/rlottiePlayer.exe: Win.Keylogger.Generic-9973679-0 FOUND

As I believe it may be a false positive, you may want to report it to ClamAV via https://www.clamav.net/contact

[mymedia2]

rlotties sources
.dll

🤡

That is definitely a false positive. Because the code in this Git repository can't read keystrokes. It receives input through file or variable in the main memory.