search

Dizzy611 / DancingMadFF6

An MSU-1 modification for Final Fantasy 6
Other
24 stars 1 forks source link

Avira detects currently-unreleased Installer.exe (component of DancingMadInstaller.exe) as "Heur/APC (Cloud)". #23

Closed Dizzy611 closed 6 years ago

Dizzy611 commented 6 years ago

Putting this up here to basically pre-empt any complaints and show this as a known issue, before I put the affected installer out as a release.

This is, obviously, a false positive. All the code for this project is publically available, and you should, if you have Python 3.6 and all the necessary modules installed, be able to generate an identical exe with cx_freeze yourself from the provided code.

That said, here's a VirusTotal of the affected file showing 1/61 detections (amusingly, NOT Avira, which is the one that triggered on my machine locally...)

https://www.virustotal.com/#/file/f289fe7ef2a4aacb8d80a7c37892e89b1f93f46d0f2c56a7b56657d7a8a2f789/detection

If you have concerns, you can compare that SHA-1 hash against the hash of Installer.exe within the upcoming release.

I've already reported this false positive to Avira.

Title will be updated once the file is actually tested and released.

Dizzy611 commented 6 years ago

Sorry if I sound grumpy about this, but I'm annoyed at the moment mostly because it's impeding my testing, as the self-extractor extracts to different folders each time so I can't tell Avira to ignore it by folder/filename, and I'm not super comfortable with just disabling Avira altogether while I'm doing my testing.

This appears to have been triggered by the switch to Python 3.6.

Dizzy611 commented 6 years ago

After having reported a false positive to Avira and had it confirmed by them, the application no longer shows up as Heur/APC (Cloud) and installs without issue on my system with Avira real time protection on.