ED/EDMarketConnector
1
0
Fork 0
mirror of https://github.com/EDCD/EDMarketConnector.git synced 2025-07-14 15:41:09 +03:00
Code Issues Projects Releases Wiki Activity

Troubleshooting: Update malware detection section

Athanasius 2021-07-17 20:32:19 +01:00
parent 4ce8a7f040
commit 118e43c4b6
No known key found for this signature in database
GPG Key ID: AE3E527847057C7D
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
Troubleshooting.md

@ -224,12 +224,11 @@ We have had reports that Anti-Virus software such as:
- AVG Anti-Virus - AVG Anti-Virus
- BitDefender - BitDefender
- MalwareBytes - MalwareBytes
- (Microsoft) Windows Defender
can sometimes report that either one of our installers (e.g. can sometimes report that either one of our installers (e.g.
EDMarketConnector_win_5.0.0.msi) or an executable therein is malicious in EDMarketConnector_win_5.0.0.msi) or an executable therein is malicious in
some manner. This has invariably always been a false positive. Microsoft's some manner. This has invariably always been a false positive.
Windows Defender on Windows 10 never has any issue with any of our application
files.
The .msi files we distribute are built either on a trusted developer's The .msi files we distribute are built either on a trusted developer's
machine, or on GitHub itself (but then downloaded to a developer's machine machine, or on GitHub itself (but then downloaded to a developer's machine
@ -240,6 +239,17 @@ See discussion in [EDMC 5.0.0. Flagged at Malware by AVG Anti Virus #1058](https
for more details about the 'cause' of this, including links to py2exe for more details about the 'cause' of this, including links to py2exe
issues about it. issues about it.
Our working assumption is that some malware authors also use py2exe, or
something similar, to build python scripts into windows executables.
Those then get correctly flagged as malware by various vendors, but
there's then collateral damage from them identifying actually innocent
parts of those malware executables as an issue. That then subsequently
causes them to misidentify innocent programs built that way as malware.
Every time we've reported the specific file(s) to an AV vendor and
they've looked at them more closely they've then come back to us and
admitted it was a false positive.
It might be worth trying a manual download and install, if what you're It might be worth trying a manual download and install, if what you're
Anti-Virus is objecting to is the EDMarketConnector.exe -> WinSparkle.dll Anti-Virus is objecting to is the EDMarketConnector.exe -> WinSparkle.dll
-> Download -> Run Installer chain: -> Download -> Run Installer chain: