Hey Chris,

thanks for clearing that up!

Cheers,
Dominik

Am Mi., 2. Aug. 2023 um 08:41 Uhr schrieb 'Chris Barker' via PyInstaller <
[email protected]>:

> On Tue, Aug 1, 2023 at 9:23 AM 'Jasper Harrison' via PyInstaller <
> [email protected]> wrote:
>
>> This is almost certainly a Trojan,
>
>
> To be clear, this is almost certainly a false positive, due to someone
> having used PyInstaller to distribute a Trojan.
>
>
>> as unfortunately many amateur malware authors write Python-based malware
>> which they package & release with PyInstaller. As there is a consistent
>> binary signature across all PyInstaller executables it results in a lot of
>> false positives.
>>
>
> So the virus scanner knows that the PyInstaller Wheel looks a LOT like a
> known Trojan.
>
> So the wheel is probably safe, but unfortunately, an application built
> with it may get flagged as well :-(
>
> Have I got that right?
>
> -CHB
>
>
>> Jasper Harrison, aka Legorooj
>> Core Developer on PyInstaller
>> https://legorooj.net
>>
>>
>>
>>
>>
>>
>> -------- Original Message --------
>> On 1 Aug 2023, 15:23, Dominik Niedenzu < [email protected]>
>> wrote:
>>
>>
>> Hi Guys,
>>
>>
>> first let me thank you for your great work - I am a big fan of
>> pyinstaller!
>>
>> Some minutes ago, I downloaded and scanned:
>>
>> pyinstaller-5.13.0-py3-none-win_amd64.whl
>>
>> and got:
>>
>> (Jiangmin) --> "Trojan.PSW.Multi.me <http://trojan.psw.multi.me/>".
>>
>> Does anybody know whether this is a known false positive (or might this
>> be a serious threat)?
>>
>>
>> Thanks in advance and cheers,
>> Dominik
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "PyInstaller" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/pyinstaller/1598c3d2-986f-4854-a065-0cb3d3872f03n%40googlegroups.com
>> <https://groups.google.com/d/msgid/pyinstaller/1598c3d2-986f-4854-a065-0cb3d3872f03n%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "PyInstaller" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/pyinstaller/XWzYUTjtNxoxwZ7ULJMO_S1zV_v9NYb8zw6vO00o2GGoRTAJywuZh5fLz137sLRtTdpVHSHviQXzIBkcIMlA3gdQsI3cY8Wa0zCtebJTQGo%3D%40protonmail.com
>> <https://groups.google.com/d/msgid/pyinstaller/XWzYUTjtNxoxwZ7ULJMO_S1zV_v9NYb8zw6vO00o2GGoRTAJywuZh5fLz137sLRtTdpVHSHviQXzIBkcIMlA3gdQsI3cY8Wa0zCtebJTQGo%3D%40protonmail.com?utm_medium=email&utm_source=footer>
>> .
>>
>>
>
> --
>
> Christopher Barker, Ph.D.
> Oceanographer
>
> Emergency Response Division
> NOAA/NOS/OR&R            (206) 526-6959   voice
> 7600 Sand Point Way NE   (206) 526-6329   fax
> Seattle, WA  98115       (206) 526-6317   main reception
>
> [email protected]
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "PyInstaller" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/pyinstaller/JDfBdjKCQao/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/pyinstaller/CALGmxEL9ZOFcJU%3Dzq%2Bf0X4E6CCmNObCrtNJzK7AJ0UOetLG7ig%40mail.gmail.com
> <https://groups.google.com/d/msgid/pyinstaller/CALGmxEL9ZOFcJU%3Dzq%2Bf0X4E6CCmNObCrtNJzK7AJ0UOetLG7ig%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"PyInstaller" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/pyinstaller/CAMCixW3Y6mapWSurgo6tMGRk%3DFqdzskGPO93hgKkbSfrGz1V-Q%40mail.gmail.com.

Reply via email to