I created a very simple Windows form project in Visual Studio 2015, with only 1 button, that shows 1 message box on click.
I compiled it and sent the file the file to a friend, but he scanned it with Virustotal, where the result was this. One AV detects it as HEUR/QVM03.0.Malware.Gen.
What is the problem here?
Virus Total scans the uploaded file with a lot of different antivirus products. Some of these product are good, some are great, but some are also poor. This is the reason why some of these products will give a false positive on even a simple Windows Forms application.
Some antivirus vendors go as far as detecting any executable (*.exe file) as "malware" or "suspicious" if it does not have a digital signature. This is a very bad approach and a lot of independent developers have had problems because of this. It is easy for a big company which creates some commercial software to acquire and buy a digital certificate, which will be used to sign software, but this is very big problem for an independent developer working on a freeware app.