search

electron-userland / electron-builder

A complete solution to package and build a ready for distribution Electron app with “auto update” support out of the box
https://www.electron.build
MIT License
13.57k stars 1.73k forks source link

App installer detected as HEUR: `Trojan-PSW.Win32.Stealer.gen` #6294

Closed juanmartin closed 2 years ago

juanmartin commented 2 years ago

Hi Our application installer is being detected as Trojan-PSW.Win32.Stealer.gen by Kaspersky software only on Windows. Ran VirusTotal over the installer and the only one which detects this is Kaspersky. Installed Kaspersky Internet Security to test on a Windows machine and it instantly deletes the installer when downloading it. We do code sign our package. Please let me know what other info can I provide to help solve this issue. Thanks!

mmaietta commented 2 years ago

Can you try upgrading to next electron-builder 22.14.x?

Also, are you able to reproduce this when building your app from a different build machine? I feel like this would have been flagged more often if it were spread more widely, so I'd like to see if you can repro on other build machines. I can't say that I've seen this detection before in my team's production builds.

juanmartin commented 2 years ago

I can confirm Kaspersky Internet Virus did not delete my application installer after updating to electron-builder@next and running a package build through CircleCI.

Thank you so much!!! this fixed issues for our customers using Kaspersky software.