1) Official download page for our decompiler is
In the past, we also used
download URLs on our previous homepage https://www.free-decompiler.com
2) Any other download locations cannot be trusted as the decompiler is opensource and
anybody can create it's own version that might contain anything.
3) Since you posted report coming from a file called "data.tar", which is uknown to me, I
will comment official URLs check.
This is VirusTotal report for official download location of FFDec version 11.0.0:
4) Our source code does not contain anything malicious, I am the main creator and I give
you my word that it is clean, does not do anything suspicious. Anybody can check it by
looking into source code.
5) A few antivirus softwares unfortunately mark our decompiler as virus. As of 2018-02-04,
it was always false positives. The screenshot you posted and also my links here to
VirusTotal contain results of around 60 different antiviruses. Few of them are
unfortunately bad designed, so this leads to false positive. The results shows "1/58"
detected. This means only one of the antiviruses said that it's virus. Other 57 said it's
6) I know about the Zillya antivirus problem - in the past (last time on 2015-03-16), I
tried to contact Zillia authors on they official webpage, but the support form was not
working. I also emailed them, but no response.
They mark our decompiler as virus and I cannot do anything against it. I don't know why
they mark it, I insist that it is clean, but their support is really fucked. Do not trust
7) In the links I posted above, it looks like "MalwarePatrol" antivirus has problem with
latest version. (This time 1 of 67 antiviruses).
I might want to contact MalwarePatrol to solve this, but I am not really in the mood to
communicate false positives again since the Zillya problem anoyed me too much in the past.