Faster3ck / Converseen

Converseen is a batch image converter and resizer
https://converseen.fasterland.net/
GNU General Public License v3.0
423 stars 32 forks source link

VirusTotal reports 3 malware detections for Version 0.12.0.1 #155

Closed jbionic2016 closed 8 months ago

jbionic2016 commented 9 months ago

https://www.virustotal.com/gui/file/4a6e1241435a1528a494a0c73b58414d9243032e6613b3da04a7f4e6850b5104

Is there any way to fix it?

Faster3ck commented 9 months ago

Hi, unfortunately, it is common for VirusTotal to report certain ImageMagick modules as false positives. The ImageMagick modules included within the Windows versions of Converseen are compiled via source code and, therefore, are not code-signed. Anyway, I have noticed that even some modules from the official and code-signed releases of ImageMagick are randomly reported as false positives.

Unfortunately, I'm not sure if there is a way to fix this problem. However, I am working on a GitHub Action to compile (including ImageMagick) and deploy Converseen directly through GitHub, ensuring that the entire process is as transparent as possible!

Faster3ck commented 8 months ago

Since version 0.12.0.2-2 of Converseen I have been using ImageMagick's official and codesigned dll libraries to compile and deploy the final packages.

The problem of false positives, while still present on some virustotal antiviruses, has been drastically reduced and the entire build and release process can be followed via GitHub Actions.