zanllp / sd-webui-infinite-image-browsing

A fast and powerful image/video browser for Stable Diffusion webui / ComfyUI / Fooocus / NovelAI / StableSwarmUI, featuring infinite scrolling and advanced search capabilities using image parameters. It also supports standalone operation.
MIT License
968 stars 120 forks source link

Windows defender trojan detection #490

Closed silveroxides closed 8 months ago

silveroxides commented 8 months ago

Windows defender reports the exe setup file as containing a malicious trojan

Trojan:Win32/Sabsik.TE.A!ml

Alert level: Severe Category: Trojan Details: This program is dangerous and executes commands from an attacker.

EDIT: Just to be clear. I know the Readme.md mentions a false positive but a 'trust me bro' approach is not really the one you want to take in these kind of cases. Provide clear explanation as to why there is a false positive at all and if not possible to fix it, provide explanation as to why.

Learn more

silveroxides commented 8 months ago

VirusTotal scan

msedge_85q9i0U0Cx

silveroxides commented 8 months ago

Version 7.0 VirusTotal scan

firefox_N32BVUvElE

silveroxides commented 8 months ago

Version 6.0 VirusTotal scan

firefox_mbAoqja8YQ

zanllp commented 8 months ago

I'm not entirely sure about the reason for the false positive virus report, but one thing is clear: it's because of the use of Nuitka. The Infinite Image Browsing (IIB) project only uses Nuitka during the compilation process. I have trust in Nuitka. If you're still concerned, you can choose not to use the binary version or reach out to the Nuitka community for more information.

silveroxides commented 8 months ago

I'm not entirely sure about the reason for the false positive virus report, but one thing is clear: it's because of the use of Nuitka. The Infinite Image Browsing (IIB) project only uses Nuitka during the compilation process. I have trust in Nuitka. If you're still concerned, you can choose not to use the binary version or reach out to the Nuitka community for more information.

Ok. But where is the source for the binary version? I would have no complaints about having the option to compile it myself.

zanllp commented 8 months ago

https://github.com/zanllp/sd-webui-infinite-image-browsing/blob/main/.github/workflows/tauri_app_build.yml

zanllp commented 2 months ago

In the latest release, a PyInstaller-compiled version has been added, significantly reducing the likelihood of false positive virus detections. https://github.com/zanllp/sd-webui-infinite-image-browsing/releases/tag/v0.17.0