search

nimaid / binary-waterfall

A Raw Data Media Player
GNU General Public License v3.0
87 stars 3 forks source link

False alarm (VirusTotal Detection: Trojan/Win32.Wacatac) #20

Open Iliya5digital opened 1 month ago

Iliya5digital commented 1 month ago

Your application has one false positive https://www.virustotal.com/gui/file/b9a9d4b32be4a61fb9227e6af1d154de3677d77cafbffbe99bc250930a1048b9/details

Can you remove this?

nimaid commented 1 month ago

Sadly, I have absolutely no idea how to.

  1. I don't know why Antiy-AVL flags this as Trojan/Win32.Wacatac.
  2. I don't know what sort of Python commands could trigger this false positive.
  3. I therefore have no way of figuring out which lines of code cause the issue.

I suspect that the very fact it's a Pyinstaller executable (extracts an executable payload to temp then runs it) may be enough to make the program look sus. Again, IDK if/which lines of code can be changed to convince Antiy-AVL that my program is a good boy who plays by the rules.

I'm open to any technical insights that may allow me to "remove" this false positive. Until then, I will keep this issue open, and close duplicates with a reference to this issue.