Issue 33220: Antivirus hits on python-2.7.14.amd64.msi file (original) (raw)

Issue33220

Created on 2018-04-03 22:24 by brett.rasmussen@inl.gov, last changed 2022-04-11 14:58 by admin. This issue is now closed.

Messages (2)
msg314904 - (view)	Author: Brett Rasmussen (brett.rasmussen@inl.gov)	Date: 2018-04-03 22:24
The antivirus program 'AVG Business Edition' reported that the file python-2.7.14.amd64.msi contained "Trojan horse SCGeneric_c6.HJQ". The virustotal.com web site reported a match on MD5 370014d73c3059f610c27365def62058 for file python-2.7.14.amd64.msi (i.e. Baidu Win32.Trojan.WisdomEyes.16070401...) Hopefully these are just 'false positives' ? Thanks, BR
msg319817 - (view)	Author: Karthikeyan Singaravelan (xtreak) *	Date: 2018-06-17 14:37
Thanks for the report. I think it's a false positive and the md5 you have attached matches with the official release of 2.7.14 installer that you can verify from https://www.python.org/downloads/release/python-2714/. There were similar cases reported and for the most part they are mostly false positives that have to be reported to the antivirus vendor so that they update the signature. BitDefender reporting msi installer as a virus : https://bugs.python.org/issue30944 Similar case with virustotal.com for 2.17.2 msi installer : https://github.com/python/pythondotorg/issues/1092 Thanks