SoftFever / OrcaSlicer

G-code generator for 3D printers (Bambu, Prusa, Voron, VzBot, RatRig, Creality, etc.)
https://discord.gg/P4VE9UY9gJ
GNU Affero General Public License v3.0
5.76k stars 652 forks source link

Anti virus program deletes current 2.0 version #4798

Open Skyl-Orca opened 2 months ago

Skyl-Orca commented 2 months ago

Is there an existing issue for this problem?

OrcaSlicer Version

2.0

Operating System (OS)

Windows

OS Version

Windows 10

Additional system information

No response

Printer

Bambulab X1

How to reproduce

Unfortunately, my antivirus program still deletes the exe of the current stable version 2.0 :-( something still seems to be recognized as a "threat".

Actual results

Norton

Expected results

-

Project file & Debug log uploads

-

Checklist of files to include

Anything else?

No response

TexZeTech commented 2 months ago

Whats the Anti-virus?

Skyl-Orca commented 2 months ago

Norton

TexZeTech commented 2 months ago

If you are truly concerned email NortonAV and get them to check the file.

I would say it's most likely a false positive and I would just hit ignore, however if you are even slightly concerned that your file has been compromised check the SHA256 of OrcaSlicer_Windows_Installer_V2.0.0.exe and verify it.

I just downloaded the exe from https://github.com/SoftFever/OrcaSlicer/releases/tag/v2.0.0 .

SHA256: 58b400ec976d1e38f8876d75b6e7c6ac9945cb5f231705b71c96d10e474ad32c

SHA256: 58b400ec976d1e38f8876d75b6e7c6ac9945cb5f231705b71c96d10e474ad32c

VirusTotal says its clean.

justanotheruser4once commented 1 week ago

Aside from Norton, there are 2 additional AV engines that mark the Installer (but not the portable version) as malicious. These are the Bkav (report from VirusTotal) and the HybridAnalysis (CrowdStrike Falcon sandbox), and the hash is correct - 58b400ec976d1e38f8876d75b6e7c6ac9945cb5f231705b71c96d10e474ad32c. I've seen this a fair amount with installers specifically. There is a currated list of contacts for the different AV vendors - AV False Positive Help

Bkav / VirusTotal Report

CrowdStrike Falcon / HybridAnalysis Report

Specifically for Norton, they have provided a link: Norton FP Submissions

Anyone can reach out, but I think FP submissions would be better received from developers that may be able to answer any question that arises.