Anti-Virus False positive

[Wolfmyths]

Some reports have shown that the program raises anti virus programs.

DeepInstinct: MALICIOUS
Microsoft: Program:Win32/Wacapew.C!ml

These devs have the exact same issue. https://github.com/pyinstaller/pyinstaller/issues/5668

[Wolfmyths]

Update:

Virus total detects that these strange links are being used

• fp2e7a.wpc.2be4.phicdn.net
• fp2e7a.wpc.phicdn.net

Upon research it seems that this is a false positive too. https://github.com/hoshsadiq/adblock-nocoin-list/issues/452

[Wolfmyths]

According to multiple forms on the internet, you can avoid certain false positives by making your own bootloader for PyInstaller.

https://pyinstaller.org/en/stable/bootloader-building.html

https://stackoverflow.com/questions/43777106/program-made-with-pyinstaller-now-seen-as-a-trojan-horse-by-avg

If anyone wants to help out and do this, that would be amazing. Keep in mind that this process should also be automated for github workflows if it's possible.

[Wolfmyths]

After compiling PyInstaller myself and then building the program with it, Microsoft's false positive goes away.

Because this gets rid of Microsoft's false positive this might be worth looking into.

The following links are Virus Total's report on before/after using a custom pyinstaller bootloader to build the executable.

Before: https://www.virustotal.com/gui/file/e0cec3f3af4a50cb5d37e8d9d50a484eb1c911f871893d88e64051bcc2c1ae74

After: https://www.virustotal.com/gui/file/c3e6370e5193602b48a89f9b9225cf891ca4cc267b9b887dbde18aaccb76be90

The "strange links" also disappear from the behavior tab

All that's left now is to somehow download MinGW-w64 via workflow and compile PyInstaller so it can be used as normal.

[Wolfmyths]

Closing this for now as that microsoft no longer detects my program as a virus