Discogs Batch Tagger 2.57 (Updated: 2021-08-11)

[JackFrost]

You could upload it to virustotal.com
There it will be tested with 40 Antivir Scanner

As I said, Defender keeps deleting the file before I can grab it to submit to VT...

VT=virustotal.com As i read your post i thought, "what is VT" ??? Doesn't matter, write him that he should post it to virustotal.com

You could add an exception into Defender?

I'd really rather know that it's NOT INFECTED first. Especially as trojan.bluteal is pretty nasty.
And since @tonygeee is confirming TWO hits, I think it might be best if you go grab the download and maybe check it at VT yourself. You might be spreading malware without knowing it. I don't know who is hosting the actual file but it's possible the server was compromised or maybe your machine was infected last time you compiled or ..... (any number of things, use your imagination )

Screenshots of the VT results would be great.
I'd do it myself but like I said Defender keeps deleting it and I'm not finding the "setting" to tell it to leave it alone so easily.

[Peke]

It is possible that huaristic search flag it falsely. Contact them and send them samples and url to file.

[crap_inhuman]

It is possible that huaristic search flag it falsely. Contact them and send them samples and url to file.

Hi Peke,

thanks for your post.
In the result of the scan there are mostly heuristic virus/trojan alarms...

I found a website with links to the av companys to send them samples. I will send them the code and let's see whats happening.

[Peke]

Hi,
heuristic virus/trojan alarms are usually nice words to say we do not know what it is, but similar file by size and hashtag is found in our database so we better report is as virus/trojan in case it is found true we can brag that we already detected it. Blah, Blah, Blah

We fight(read report) with Norton for years, as occasionally they decide MMW development is too fast and they can't update their white list fast enough.

Today Viruses/Trojans wants to steel your sensitive data and send it to someone that can sell it to someone that can use it or use ransomeware to take your money. Making Viruses and being a hacker today is a very good paid job like any other we surpassed the time when hackers had code and decency when all is done for fame and innovation. Except for maybe Spectre/Meltdown Exploits that force both Intel and AMD to invest bit more into R&D.

To conclude in today terms only real antivirus is Hardware Firewall tightly set, period.

To test one virus I own, I have set VM PC infected with ransomware that from time to time report Translated: "I can't encrypt your files because you do not allow me to mine hash key from ... and report it to ... to one that will take your money. So please disable firewall so that I can take your money" I need to fetch screenshot once so that you all can also laugh what ridiculous msg I get when it fails. How to do that, simple install VM PC update it till last update, block all inbound and outbound access while still leave internet available, then install ransomware and log and IP access connection on your firewall from that PC for next 24h. Then from safe PC simply filter those that are safe (Microsoft update, LAN Multicast [UPNP/DLNA], ....) and repeat till you have all safe Outbound IP addresses filtered and no new once created, then it should be easy to isolate Ransomware app and delete it yourself.

[crap_inhuman]

Thank you for your good Explanation.

I just received the first answer from symantec, confirming the false positive Report. The detection will be removed from their products.

...now waiting for the other av companys..

[Peke]

Hi,
I had no doubt that it was false positive. I am only sorry that great small products are bought from big companies to make them worse and unusable.

Examples:
Clean and simple ZoneAlarm firewall https://www.zonealarm.com/software/free-firewall/ history https://www.zonealarm.com/software/rele ... afree.html before bought by Checkpoint
Latest that made me so so sad is https://www.binisoft.org/ small application 3.5MB https://www.binisoft.org/wfc.php that was bought by McAfee to be integrated into their bigger solutions that I do not want nor need

Also if anyone never used https://www.binisoft.org/usbc you should try and stop any Virus execute on USB or find out if you have one installed on your PC that spread over usb.

[crap_inhuman]

I'd really rather know that it's NOT INFECTED first. Especially as trojan.bluteal is pretty nasty.
And since @tonygeee is confirming TWO hits, I think it might be best if you go grab the download and maybe check it at VT yourself. You might be spreading malware without knowing it. I don't know who is hosting the actual file but it's possible the server was compromised or maybe your machine was infected last time you compiled or ..... (any number of things, use your imagination )

Screenshots of the VT results would be great.
I'd do it myself but like I said Defender keeps deleting it and I'm not finding the "setting" to tell it to leave it alone so easily.

I got respond from the MS viruslab. They removed the detection after checking the file, some others antivir companys, too. But 16 engines at virustotal.com still "found" something in the file.... This companies didn't check the file yet, or haven't a email address to receive false positive submissions or answer my inquiry with the following email:

Our Virus Lab has informed us that the submitted file is currently detected by our scanners as Trojan.GenericKD.31301662 (Engine A).

Regarding first analysis, the file contains multiple malicious indicators. Some examples, can be found below:

1. Iterates over running process.
2. Opens Memory allocation for a specific process.
3. Changes the process' Privilege.
4. Gets the Account Name.
5. Creates a custom process.
6. Writes into values into a running process.

For this reason, the detection will be maintained.

This is what Peke said about heuristic alarms.

[Peke]

Also if anyone never used https://www.binisoft.org/usbc you should try and stop any Virus execute on USB or find out if you have one installed on your PC that spread over usb.

I tried binsoft but no result for stopping viruses on usb I do not know where the problem is exactly

Setting USB Flash Drives Control to disable Write and execute should stop 99.99% USB spread viruses that I had come in contact past two decades.

[Peke]

Our Virus Lab has informed us that the submitted file is currently detected by our scanners as Trojan.GenericKD.31301662 (Engine A).

Regarding first analysis, the file contains multiple malicious indicators. Some examples, can be found below:

1. Iterates over running process.
2. Opens Memory allocation for a specific process.
3. Changes the process' Privilege.
4. Gets the Account Name.
5. Creates a custom process.
6. Writes into values into a running process.

For this reason, the detection will be maintained.

This is what Peke said about heuristic alarms.

If that was my app internally in my mind I would be more like bellow smiley regarding their ignorance. (Link to my post is when you click on Image)


FYI Latest results Details just confirm my point of that they do not show right results, but like tests it is inconclusive

[crap_inhuman]

I just released an updated version.

I checked it at VT and 6 av-scanner found "something":

Antiy-AVL -- Trojan/Generic.ASVCS3S.1E5
CrowdStrike Falcon -- malicious_confidence_60% (D)
McAfee-GW-Edition -- BehavesLike.Win32.Generic.tc
SentinelOne -- static engine - malicious
Sophos ML -- heuristic
Trapmine -- malicious.moderate.ml.score

All other av companys got my samples and drop the discogs tagger off their heuristic/generic list.

[chris_a_johnson]

I've been trying to use the batch tagger to update my albums with more tagging data, but keep running into a problem. The track listing on the right-hand side gets hidden behind the tagged fields grid at the bottom of the screen. Whenever I try to de-select a track at the bottom of the tracklisting window, the grid jumps to the front and I can't de-select the track. There also doesn't seem to be a way to alter the size of the grid up or down so that I can see more of the tracklisting window. Is there any way to de-select these tracks that I just haven't figured out?

Thanks

[crap_inhuman]

Could you please post a screenshot?

[TheMcShan]

Just want to say thank you so much for working on this and the main addon for so many years!
I want to use this addon to scrape genre/style information for my albums and im wondering if there is an easy way to do this. currently i cant figure out how to tell the addon not to tag tracknames.

[crap_inhuman]

Just want to say thank you so much for working on this and the main addon for so many years!
I want to use this addon to scrape genre/style information for my albums and im wondering if there is an easy way to do this. currently i cant figure out how to tell the addon not to tag tracknames.

Hi, i'm happy that you appreciate my work.
You could use the Discogs Batch Tagger for doing this, but first i have to add the option for updating (or not updating) the track title. Like in the main addon.
Give me some time and i update the Discogs Batch Tagger.

[crap_inhuman]

Just want to say thank you so much for working on this and the main addon for so many years!
I want to use this addon to scrape genre/style information for my albums and im wondering if there is an easy way to do this. currently i cant figure out how to tell the addon not to tag tracknames.

i just released a new version of Discogs Batch Tagger.

There is now an option to tag/not to tag the track names. If you give it a try, i would be happy if you write me your experience and/or any suggestions.