Advantage of OVTune?

We've been around this quite a bit. It contains known malicious code signatures, though the dealer wouldn't know so I doubt they would deny warranty.

 

hello,
For some reason your ticket was not showing in our inbox until I searched the ticket number. The wait time is RARELY this long if ever. We are sorry about that and will get the reg code out to you asap

What are you talking about?

There is no "malicious code" in our program. Anti viruses flag the software because the protection software API has been used in the past by some folks who create bad software. These signatures are automatically considered "unsafe" by some antivirus programs.

But to just blanket state that our software HAS malicious code and or is doing malicious things is false.

 

Here is our software loaded to virustotal.
I've generally turned a blind eye to these bogus claims, but it's getting annoying at this point.

here is what I could fit into an image. most do NOT flag it as anything malicious.






And the actual TUNE itself contains no such thing as malicious code. To even hint that it could contain malicious code is ridiculous.

 

No problem! My truck isn't delivered yet, so I was not going to bother bugging you with additional tickets until a week or so before delivery. Thanks again!

 

It’s because you have people here who make a living in cyber security and many who work for cyber security firms.

Virus Signatures aren’t created arbitrarily and they don’t flag things like APIs that were once possibly used maybe by some guy for bad reasons.

 

Many different kinds of software get falsely flagged as viruses.
Our software employs
anti debugging code
anti reverse engineering code
our software masks and destroys parts of the import segment of code
it is also compressed and obfuscated, and wrapped with a exe wrapper that *has been used by bad guys historically*

that doesn't mean it's a bad guy software. I've used this software for years...
What good would it do for me ..a damn car tuner to send bad software to people.

Write a simple software and wrap it with obsidium. and check for yourself.

here is an article of a hello world example being flagged.
https://www.csoonline.com/article/3...irustotal-flagged-hello-world-as-harmful.html


here is the actual software protection system being called a virus..lol
https://standaloneinstaller.com/download-obsidium-software-protection-system/scan-report​

 

You do you man, I do this for a living, it’s pretty clear you are out of your depth.

 

if this is what you do for a living, then I'm sure you at least know that software that contains known malicious code signatures does not, in every case, mean it's malicious software. Which is my point. Our software may get flagged as a virus by some scanners.
That doesn't mean our software is out to get you.

 

I said something similar in another thread and I don't believe you are doing anything malicious but I will say this, no software we develop ever contains virus signatures, false or otherwise.

Whats odd though is ransomware was detected in your software? Why would you need ransomware in your software?

https://www.f-secure.com/v-descs/trojan_w32_generickd_3016333.shtml

https://support.avira.com/hc/en-us/...ke-against-MBR-Ransomware-TR-Crypt-XPACK-Gen-

That’s some what rhetorical as we all know it doesn’t. I would need to do a line-by-line code review to gain any level of confidence with your software.

Cheers and good luck.

 

I honestly don't know. I even checked for this file in my computers temp folder, as I use this same software. Cannot find anything like it's saying.
the software does require a key before it is active. that's as close to whatever this is saying.

 

If I was allowed to only keep one mod on my truck, it would be OVtune.

There is no chance in hell I would still own a 3rd gen without it.

 

Anyone OVTune 2020? How is it?

 

Dealer won't know its tuned if you don't tell em..

 

No tunes available for 2020 yet.

edit: sorry, meant to specify for the manual transmission. Don’t know about auto.

 

Running the current 2020 2.0 beta is an improvement but not nearly as substantial of one as it was to my 2018.

 

The final build of 2.0 looks promising though. I am mostly excited at the option to select tire size providing proper shift points for 33s.

 

Theres no way for them to identify you did anything.

 

I know a lot of guys that worked in cyber security.

Very few of guys I know actually had coding experience. Most were IT guys with system administration experience.

as hobbyist coder myself, I question if they have ever written a program ever. Same as nearly every “IT guy” I have ever encountered.

Not saying this to throw shade on a counter opinion. However, I consider an actual coder’s opinion to carry more weight than a “IT guy”

 

A lot of factors are probably going on here as to why this will never be solved...
I feel like with my knowledge of IT, OV tune has a fair point, these tools/tests are screening tools like casting a big net just because you caught something doesnt mean its a great white shark but it could be. In essence high sensitivity poor specificity.
Is it possible its being flagged as ransomware but really its actually flagging the code that requires you to have the authorization code as an earlier member alluded to needing to get the software working
If @JoeCOVA could be a little less vague and give specifics that would help.
Heck I am sure Ovtune would like to nip this concern in the bud which is why they are giving an expanded explanation.

one may think a simple solution is to allow an independent source to have access to the code and verify if there is any malicious code
maybe we could make a poll to see how many people are interested in OV tune but are concerned for malware ( I bet not a lot of people)
and if it was enough people then a group fund me account to pay for an eval of the software if OV tune was willing to give a company access to verify
such as a certified expert malware analyst (CEMA)

 

It’s not worth rehashing over and over. People are welcome to PM me but I’ve said all I’ve needed to say in multiple threads. Just beating a dead hose.