search

mjishnu / alt-app-installer

A Program To Download And Install Microsoft Store Apps Without Store
https://github.com/mjishnu/alt-app-installer
MIT License
356 stars 34 forks source link

VirusTotal false positive? #46

Open SleepDaemon opened 9 months ago

SleepDaemon commented 9 months ago

https://www.virustotal.com/gui/file/68f12f2d3822db3aa1def8e62bcdba64194573f8921b13d08d696b4070794227/detection/f-68f12f2d3822db3aa1def8e62bcdba64194573f8921b13d08d696b4070794227-1700428804

mjishnu commented 9 months ago

As expressed in #44 the answer remains same, these are all false positive by the malware scanner and for skeptical folks i would suggest build from source.

mjishnu commented 8 months ago

UPDATE (v2.6.8): This false positive is caused because pyinstaller is used by many bad actors to supply malware. The fix i used is to compile the bootloader myself even though it does reduce the false positive detection from 14 to 4 it doesn't complete remove them so hence the new virus total report, The only permeant fix is to digitally sign the app but it requires a paid license

edgeofinnerspace commented 8 months ago

UPDATE (v2.6.8): This false positive is caused because pyinstaller is used by many bad actors to supply malware. The fix i used is to compile the bootloader myself even though it does reduce the false positive detection from 14 to 4 it doesn't complete remove them so hence the new virus total report, The only permeant fix is to digitally sign the app but it requires a paid license

check out laragon - not sure if you can sign with your own signature but it does have the capability built in to the services it comes with - im not a dev so i am not sure how all that works. but i have also seen software for windows for signing and distributing and it was meant to be a free tool as well as open source. it was several years ago but i will see if i can find it.

mjishnu commented 8 months ago

UPDATE (v2.6.8): This false positive is caused because pyinstaller is used by many bad actors to supply malware. The fix i used is to compile the bootloader myself even though it does reduce the false positive detection from 14 to 4 it doesn't complete remove them so hence the new virus total report, The only permeant fix is to digitally sign the app but it requires a paid license

check out laragon - not sure if you can sign with your own signature but it does have the capability built in to the services it comes with - im not a dev so i am not sure how all that works. but i have also seen software for windows for signing and distributing and it was meant to be a free tool as well as open source. it was several years ago but i will see if i can find it.

isn't largon for web apps can you build python app more specifically pyqt apps with it? btw if you do find something that can digitally sign the app please do tell me thanks!