search

qmk / qmk_firmware

Open-source keyboard firmware for Atmel AVR and Arm USB families
https://qmk.fm
GNU General Public License v2.0
18.24k stars 39.3k forks source link

mcufont.exe being picked up by AntiVirus #5207

Closed dernPerkins closed 2 years ago

dernPerkins commented 5 years ago

Investigate into reasons behind why the mcufontencoder under lib\ugfx\tools\mcufontencoder\binaries\windows\mcufont.exe keeps showing up as a threat and being quarantined by malware protection.

Symantec reports it as a Heur.AdvML.C threat: is a heuristic detection designed to generically detect malicious files using advanced machine learning technology. A file detected by this detection name is deemed by Symantec to pose a risk to users and is therefore blocked from accessing the computer.

As well as PUA.Gen.2: is a generic detection for many individual but varied potentially unwanted applications for which specific definitions have not been created. A generic detection is used because it protects against many potentially unwanted applications that share similar characteristics.

ghost commented 5 years ago

Same thing for Mcafee...

image

kainoaseto commented 5 years ago

Sophos flagged this as well, I tend to error on the side of better safe than sorry but I imagine this would cause issues for some of the windows users. Maybe a rollback of a previous version of the ugfx would work until we find out what's going on

noroadsleft commented 5 years ago

Actually, it's a goal of QMK to remove uGFX as a dependency, due to licensing issues.

No work has been done yet on this front, but it's a definite desire.

kbelcher83 commented 4 years ago

Has there been any progress on this? Many of the major AV players are picking it up https://www.virustotal.com/gui/file/727952580c14ecb0f39408aa3ffe568b5486c55dd5b91f9e86a167263e289a8b/detection

If it gets quarantined, can qmk still compile keyboards?

noroadsleft commented 4 years ago

@kbelcher83 For progress, not that I know.

The only keyboards in the repository that are affected by this are the Ergodox Infinity and the WhiteFox – none of our other supported boards use uGFX at all. QMK would still be able to compile any other boards, though.

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had activity in the last 90 days. It will be closed in the next 30 days unless it is tagged properly or other activity occurs. For maintainers: Please label with bug, in progress, on hold, discussion or to do to prevent the issue from being re-flagged.

stale[bot] commented 4 years ago

This issue has been automatically closed because it has not had activity in the last 30 days. If this issue is still valid, re-open the issue and let us know.

jandusek commented 4 years ago

Any news on this front? If that dependency isn't needed, can it be dropped?

jwithington commented 3 years ago

Still being flagged by Sophos

noroadsleft commented 3 years ago

I believe @fauxpark is working on removing the uGFX dependency, but I don't recall the status of that effort.

fauxpark commented 3 years ago

firetech is doing most of the work as they actually have an Ergodox Infinity to test on, I think at this point we are just waiting for the develop merge, then we can continue with the next phase which will probably end with the submodule being removed.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had activity in the last 90 days. It will be closed in the next 30 days unless it is tagged properly or other activity occurs. For maintainers: Please label with bug, in progress, on hold, discussion or to do to prevent the issue from being re-flagged.

fauxpark commented 2 years ago

uGFX has been removed now, so this issue should be resolved.