Python Forum
Pyinstaller 4.2 produced exe containing viruses ?
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Pyinstaller 4.2 produced exe containing viruses ?
#1
I recently updated my old python vers and latest version and also latest python packages.
Now when I use Pyinstaller 4.2 (latest version installed with pipenv) to create a single exe file
then windows defender is detecting alot of these exe's as containing a trojan virus 'Trojan:Win32/Wacatac.DC!ml'
or some slight variation on it (Wacatac.DA!ml) and it wont let me run them and is deleting them.
I uploaded some of exe's to virustotal.com website to check and about 26 out of the 60 virus scanners they use
detected various types of viruses. What's going on ,what should I do ? I read about similar problems by others
about pyinstaller produced exe. Thank you in advance for any help.
Reply
#2
Highly unlikely that pyinstaller created the virus. Most likely it was lurking on your system and attached itself to the .exe. However this should be reported to the authors of pyinstaller who's data can be found on Pypi here: https://pypi.org/project/pyinstaller/ or by looking at the Homepage here: http://www.pyinstaller.org/
Reply
#3
It's well know that some antivirus software raise false positive with exe created from pyinstaller

https://stackoverflow.com/questions/4377...rse-by-avg
https://github.com/pyinstaller/pyinstaller/issues/603
and many more
If you can't explain it to a six year old, you don't understand it yourself, Albert Einstein
How to Ask Questions The Smart Way: link and another link
Create MCV example
Debug small programs

Reply
#4
I'm using pipenv so I created a new clean virtual environment and installed an earlier version of pyinstaller in there (4.1)
Then I created an exe from a hello world script. The produced exe at least wasn't complained about by my local windows defender and it reported no threats detected when scanned , I then checked it on Virustotal website against thier 60 virus scanners and at least 15 of them came up with various trojans threats detected even the microsoft one hosted there (but my up to date local windows defender said it was clean) . I don't know what to make things (so I test some older pyinstaller produced exe's from a few years ago that I made on another system and these also get a few trojan threats detected when uploaded to virustotal (but only 10 or so now). I don't really know what to do about this, it doesn't make for good confidence in any distributable exe's you create if they are going to be flagged as trojans to recipients Shifty.
Could someone else check please and tell me what results they get for a pyinstaller 4.1 or 4.2 produced hello world exe on virustotal site.
thank you in advance
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  why print('\n') produced 2 new lines instead of 1 - Located inside a FOR loop JulyFire 2 538 Jan-10-2021, 01:50 AM
Last Post: JulyFire

Forum Jump:

User Panel Messages

Announcements
Announcement #1 8/1/2020
Announcement #2 8/2/2020
Announcement #3 8/6/2020