【报Bug】virustotal扫包，检测到__uniappquillimageresize.js文件有毒，ClamAV——Txt.Malware.Agent-9913425-0

comeon

好的，我试试看

2024-01-26 16:11

YUANRJ

回复 comeon: 请问有问题吗？

2024-01-29 13:18

comeon

回复 YUANRJ: virus网站上没报毒了，华为还在审核中，尚未反馈

2024-01-29 13:28

YUANRJ

回复 comeon: 好的，谢谢

2024-01-29 13:40

comeon

回复 YUANRJ: 华为又给我报了个另外的病毒，「Your App is detected to carry virus: a.gray.sexyHeuristic」，他们也不给个具体说明，不知道问题在哪里。。。

2024-01-29 15:41

YUANRJ

回复 comeon: 还有别的信息吗

2024-01-29 17:44

comeon

回复 YUANRJ:

这是完整的审核信息：

「

Review comments:

App review results：

Your App is detected to carry virus: a.gray.sexyHeuristic. Please refer to the rule 2.1 of "AppGallery Review Guidelines": https://developer.huawei.com/consumer/en/doc/app/50104-02

[Suggestion]: Please check the apk file, code, third-party SDK or others to delete the virus-relevant contents.

【[Test Environment]: Wi-Fi connection, Mate 20 with EMUI 9.0.0 , Nova 7i with EMUI 10.0.1, multilingual environment.】

」

下面是我联系他们申诉的反馈：

「

Dear Developer,

Thank you for reaching us. We kindly ask you to check using the website we have shared with you below.

https://www.virustotal.com/gui/home/upload

As HUAWEI, we do not have the authority to make any changes to your codes and applications in order to protect you and your rights.

Have a nice day.

HUAWEI Developers

」

我后面又提交了www.virustotal.com的查毒结果给他们，还在等他们的反馈

2024-01-29 17:51

comeon

回复 comeon: 华为应用商店过不了，快放弃了，他们的回复：

「

Dear Developer,

Our review team tested this with multiple software engines.

Could you please check if the app uses other 3rd party sdk?

Have a nice day.

HUAWEI Developers

」

2024-01-30 17:51

DCloud_Android_ST

回复 comeon: 你有没有集成什么三方SDK如有可以去掉重新测试下。可以去https://dev.avlsec.com/public-pages/home 测试下你的apk是否存在问题

2024-01-30 19:26

comeon

回复 DCloud_Android_ST: 在这个上面测试过，没有任何问题

2024-01-31 09:13

DCloud_Android_ST

回复 comeon: 那国内的检测平台应该没有对你的apk认定为存在风险，你还得去www.virustotal.com检测下 如果还有异常情况需要跟检测平台申请误报。

2024-01-31 12:25

comeon

回复 DCloud_Android_ST:

我在www.virustotal.com和https://dev.avlsec.com/public-pages/home 这两个上都检测过了，都没问题。

估计华为用的是腾讯安全中心的检测，腾讯安全检测也就给个a.gray.sexyHeuristic结果，不给额外其他信息，申诉的回复永远就是那句“自查”

2024-01-31 13:19

DCloud_Android_ST

回复 comeon: 嗯 这事是非常让人头疼的。那就的去腾讯检测申诉误报

2024-01-31 14:44

comeon

回复 DCloud_Android_ST: 是的，只能接着申诉，走一步看一步

2024-01-31 15:21

comeon

回复 DCloud_Android_ST: 进一步的回复来了：

「

Dear Developer,

Our review and technical teams have reviewed your application again.

According to the answer we received from our technical team, there is potential 3rd party link to enter risky website.

We would like to apologize and inform you that we will share more details.

We kindly ask you to re-scan the apk file again. After fixing the problem, please re-submit it again for review.

Have a nice day.

HUAWEI Developers

」

核心意思是：有潜在的第三方链接进入风险网站。

难道是不能用webview？

2024-01-31 15:47

DCloud_Android_ST

回复 comeon: 可能是app中某个页面内容涉及违规了

2024-01-31 19:57

zjsh

我的替换文件之后上架，又报了a.gray.BulimiaTGen.h

2024-02-01 15:14

YUANRJ

回复 z***@163.com: 替文件之前也报的这个吗

2024-02-01 15:46

DCloud_UNI_GSQ

目前App上没有摇树优化，不会根据组件使用情况裁剪资源。后续会有专人联系你一同处理此问题，希望能配合一下。

2024-01-26 11:11

comeon

回复 DCloud_UNI_GSQ: 好的

2024-01-26 11:14