Anti-Virus False positive
Wolfmyths opened this issue · 4 comments
Some reports have shown that the program raises anti virus programs.
DeepInstinct: MALICIOUS
Microsoft: Program:Win32/Wacapew.C!ml
These devs have the exact same issue.
pyinstaller/pyinstaller#5668
Update:
Virus total detects that these strange links are being used
- fp2e7a.wpc.2be4.phicdn.net
- fp2e7a.wpc.phicdn.net
Upon research it seems that this is a false positive too.
hoshsadiq/adblock-nocoin-list#452
According to multiple forms on the internet, you can avoid certain false positives by making your own bootloader for PyInstaller.
https://pyinstaller.org/en/stable/bootloader-building.html
If anyone wants to help out and do this, that would be amazing. Keep in mind that this process should also be automated for github workflows if it's possible.
After compiling PyInstaller myself and then building the program with it, Microsoft's false positive goes away.
Because this gets rid of Microsoft's false positive this might be worth looking into.
The following links are Virus Total's report on before/after using a custom pyinstaller bootloader to build the executable.
Before:
https://www.virustotal.com/gui/file/e0cec3f3af4a50cb5d37e8d9d50a484eb1c911f871893d88e64051bcc2c1ae74
After:
https://www.virustotal.com/gui/file/c3e6370e5193602b48a89f9b9225cf891ca4cc267b9b887dbde18aaccb76be90
The "strange links" also disappear from the behavior tab
All that's left now is to somehow download MinGW-w64 via workflow and compile PyInstaller so it can be used as normal.
Closing this for now as that microsoft no longer detects my program as a virus