that is virustotal on the (Detection Tab)
after ya upload (ArtPlus EasyNoter PRO.exe)
then clck the (Behavior Tab) and scroll down about half way..
to see>> (Processes Injected dwwin.exe)..
Oh, If I had a time, I’d educate you about the purpose of “Behavior Tab” and “Dr Watson” (dwwin.exe), and how this creates false positives… but I don’t have the time :(
In short, this tab helps people who understand the topic to see if this is a real threat or a false positive. In this case it simply states the dwwin.exe was launched, which is actually a Windows component that collects the data about app crash… This LEGITIMATE data collection is BEHAVIOR similar to what a virus would do –> Ergo FALSE POSITIVE got triggered by this BEHAVIOR, not by the actual virus activity.
So, you see… one must understand this to use the Virustotal.com to it’s full potential!
Google started this site not to hunt for viruses, but to fight against FALSE POSITIVES that are hurting legitimate businesses just as much as real viruses (if not even more).
Have a nice day :P
Oh yes… I forgot to mention. It looks like the program crashed in the AV testing sandbox environment. Probably it was actually blocked by the AV software in the first place. Some AV vendors are smart and can recognize this, and some are not so smart. That’s why you can check results from 70-100 AV vendors and compare their findings.
But this all require some brain activity on your side too :P