search

edugca / xlRcode

Call R from Excel. Create new Excel functions that make use of R packages. Integrate both tools seamlessly.
MIT License
34 stars 1 forks source link

False positive from anti-virus programs #1

Open kingwatam opened 1 year ago

kingwatam commented 1 year ago

xlRcode is currently being flagged by some anti-virus programs due to the use of Excel-DNA. @edugca is working on a solution. This is a continuation of the discussion here.

https://www.virustotal.com/gui/file/daaf813dd465b7f32ff40206e0eb5f678f9e8ef03be44aa06f86435806d735a8?nocache=1

Unfortuantely, as of v. 0.1.5, it's still not getting past many anti-virus engines.

You can test it yourself by uploading any file (or as a zip file of many files) to here.

edugca commented 1 year ago

Just ran virustotal on the link to the following zip file, which does not contain previous versions inside:

It seems to have passed all tests.

image

If I download the zip file and run the tests on that file, then alerts are back. I guess that previous URL test does not consider the actual zip file, but simply the GitHub webpage.

image

kingwatam commented 1 year ago

I forgot that you included all your previous versions in the repo. You may also want to consider not including previous versions in the repo as the download size will inevitably grow quite large fairly soon. Each new release can be published under Releases (and any of the old versions as well if you like).

I've removed the version history folder (and the 0.1.5 zip file) and repackaged in a new file. The issue remains. https://www.virustotal.com/gui/file/6b409280ad1ef431a6f5b1fa1ba57d4683c7008ccb600fc52a324cb8d0517c40/relations

Note that running a URL through the anti-virus engines is not the same as running a file. The URL is clean but the engines don't actually download the file.

Edit: I'm fairly certain in order to avoid detection, the problematic files must be new so it wouldn't generate the same hash as the previous files in question.