search

kimmknight / rdpx

rdpx enables seamless remote access to applications running on another computer.
MIT License
71 stars 19 forks source link

Windows Defender flagging rdpx #8

Open vb-03 opened 3 years ago

vb-03 commented 3 years ago

After running the app, Windows Defender instantly flags it as a PUP image

sashaqwert commented 3 years ago

https://www.virustotal.com/gui/file/f559f84a344e6689ea5d36a065b7b8fb0e186a8b950fc92efc96a97b31597761/detection https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AWin32%2FWacatac.C!ml&threatid=2147749372 (from screenshot) https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AWin32%2FWacatac.B!ml&threatid=2147735505 (from VirusTotal)

Thanks for checking. The installed Kaspersky Total Security did not find any threats on me. VirusTotal found 11/69.

Most likely there shouldn't be viruses, but it's interesting to know why 11 antiviruses found something ...

Perhaps the reason is #7

kimmknight commented 3 years ago

I was very disappointed when it was flagged on my computer.

It seems to be a common issue with EXEs compiled using PyInstaller.

Anyone know if there is a way to sign the EXE? (and would this help?) Any other options?

vb-03 commented 3 years ago

It makes sense to me, it's just marked as a PUP instead of an actual malware