Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Antivirus hits on python-2.7.14.amd64.msi file #77401

Closed
brettrasmusseninlgov mannequin opened this issue Apr 3, 2018 · 2 comments
Closed

Antivirus hits on python-2.7.14.amd64.msi file #77401

brettrasmusseninlgov mannequin opened this issue Apr 3, 2018 · 2 comments
Labels
type-bug An unexpected behavior, bug, or error

Comments

@brettrasmusseninlgov
Copy link
Mannequin

brettrasmusseninlgov mannequin commented Apr 3, 2018

BPO 33220
Nosy @pfmoore, @tjguk, @zware, @zooba, @tirkarthi

Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2019-08-02.22:59:04.438>
created_at = <Date 2018-04-03.22:24:02.791>
labels = ['type-bug']
title = 'Antivirus hits on python-2.7.14.amd64.msi file'
updated_at = <Date 2019-08-02.22:59:04.438>
user = 'https://bugs.python.org/brettrasmusseninlgov'

bugs.python.org fields:

activity = <Date 2019-08-02.22:59:04.438>
actor = 'steve.dower'
assignee = 'none'
closed = True
closed_date = <Date 2019-08-02.22:59:04.438>
closer = 'steve.dower'
components = []
creation = <Date 2018-04-03.22:24:02.791>
creator = 'brett.rasmussen@inl.gov'
dependencies = []
files = []
hgrepos = []
issue_num = 33220
keywords = []
message_count = 2.0
messages = ['314904', '319817']
nosy_count = 6.0
nosy_names = ['paul.moore', 'tim.golden', 'zach.ware', 'steve.dower', 'brett.rasmussen@inl.gov', 'xtreak']
pr_nums = []
priority = 'normal'
resolution = 'third party'
stage = 'resolved'
status = 'closed'
superseder = None
type = 'behavior'
url = 'https://bugs.python.org/issue33220'
versions = ['Python 2.7']
@brettrasmusseninlgov
Copy link
Mannequin Author

brettrasmusseninlgov mannequin commented Apr 3, 2018

The antivirus program 'AVG Business Edition' reported that the file
python-2.7.14.amd64.msi contained "Trojan horse SCGeneric_c6.HJQ".

The virustotal.com web site reported a match on MD5
370014d73c3059f610c27365def62058 for file python-2.7.14.amd64.msi

(i.e. Baidu Win32.Trojan.WisdomEyes.16070401...)

Hopefully these are just 'false positives' ?

Thanks,
BR

@brettrasmusseninlgov brettrasmusseninlgov mannequin added the type-bug An unexpected behavior, bug, or error label Apr 3, 2018
@tirkarthi
Copy link
Member

Thanks for the report. I think it's a false positive and the md5 you have attached matches with the official release of 2.7.14 installer that you can verify from https://www.python.org/downloads/release/python-2714/. There were similar cases reported and for the most part they are mostly false positives that have to be reported to the antivirus vendor so that they update the signature.

BitDefender reporting msi installer as a virus : https://bugs.python.org/issue30944
Similar case with virustotal.com for 2.17.2 msi installer : python/pythondotorg#1092

Thanks

@zooba zooba closed this as completed Aug 2, 2019
@ezio-melotti ezio-melotti transferred this issue from another repository Apr 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
type-bug An unexpected behavior, bug, or error
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@zooba @tirkarthi