On Tue, Aug 1, 2023 at 9:23 AM 'Jasper Harrison' via PyInstaller < pyinstaller@googlegroups.com> wrote:
> This is almost certainly a Trojan, To be clear, this is almost certainly a false positive, due to someone having used PyInstaller to distribute a Trojan. > as unfortunately many amateur malware authors write Python-based malware > which they package & release with PyInstaller. As there is a consistent > binary signature across all PyInstaller executables it results in a lot of > false positives. > So the virus scanner knows that the PyInstaller Wheel looks a LOT like a known Trojan. So the wheel is probably safe, but unfortunately, an application built with it may get flagged as well :-( Have I got that right? -CHB > Jasper Harrison, aka Legorooj > Core Developer on PyInstaller > https://legorooj.net > > > > > > > -------- Original Message -------- > On 1 Aug 2023, 15:23, Dominik Niedenzu < dominik.niede...@gmail.com> > wrote: > > > Hi Guys, > > > first let me thank you for your great work - I am a big fan of pyinstaller! > > Some minutes ago, I downloaded and scanned: > > pyinstaller-5.13.0-py3-none-win_amd64.whl > > and got: > > (Jiangmin) --> "Trojan.PSW.Multi.me <http://trojan.psw.multi.me/>". > > Does anybody know whether this is a known false positive (or might this be > a serious threat)? > > > Thanks in advance and cheers, > Dominik > > -- > You received this message because you are subscribed to the Google Groups > "PyInstaller" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to pyinstaller+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/pyinstaller/1598c3d2-986f-4854-a065-0cb3d3872f03n%40googlegroups.com > <https://groups.google.com/d/msgid/pyinstaller/1598c3d2-986f-4854-a065-0cb3d3872f03n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > -- > You received this message because you are subscribed to the Google Groups > "PyInstaller" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to pyinstaller+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/pyinstaller/XWzYUTjtNxoxwZ7ULJMO_S1zV_v9NYb8zw6vO00o2GGoRTAJywuZh5fLz137sLRtTdpVHSHviQXzIBkcIMlA3gdQsI3cY8Wa0zCtebJTQGo%3D%40protonmail.com > <https://groups.google.com/d/msgid/pyinstaller/XWzYUTjtNxoxwZ7ULJMO_S1zV_v9NYb8zw6vO00o2GGoRTAJywuZh5fLz137sLRtTdpVHSHviQXzIBkcIMlA3gdQsI3cY8Wa0zCtebJTQGo%3D%40protonmail.com?utm_medium=email&utm_source=footer> > . > > -- Christopher Barker, Ph.D. Oceanographer Emergency Response Division NOAA/NOS/OR&R (206) 526-6959 voice 7600 Sand Point Way NE (206) 526-6329 fax Seattle, WA 98115 (206) 526-6317 main reception chris.bar...@noaa.gov -- You received this message because you are subscribed to the Google Groups "PyInstaller" group. To unsubscribe from this group and stop receiving emails from it, send an email to pyinstaller+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/pyinstaller/CALGmxEL9ZOFcJU%3Dzq%2Bf0X4E6CCmNObCrtNJzK7AJ0UOetLG7ig%40mail.gmail.com.
