PyInstaller - virus warnings

Question

After I managed to create a single-file exe with PyInstaller, there was a problem: Norton told me it was a dangerous file, probably a virus.

When I googled a bit, I found out that this seems to happen frequently with other virus killers like Kaspersky as well.

Since people will hardly download something marked as dangerous, compiling a script becomes rather useless.

Is there any way around this?

Answer 1

We've had some discussions on this, I can't find the thread, but I remember the idea was to ditch so-called premium antivirus software lol.

There's no problem with your code (or at least that's what I believe, without looking at your code at all) - Instead of checking program behaviour, it identifies how the program executes and deduces how it was built. Since quite a number of exploits were built using that utility, let's block all of those programs which were compiled like this - The lazy way out.

I would suggest reporting false positives to Norton/Kaspersky/whateverwowitis, but seeing that it's still an issue after years of reports, I doubt the effectiveness of the course of action.

There are some which would recommend you to upload your script/program to a couple of virus identification sites, so that antivirus software which pull data off those sites would see that you've been whitelisted. It may be worth the shot.

Answer 2

The script is totally harmless: It takes a bit of input, calculates some stuff, writes the result in a txt-file. No graphics, no 3rd party stuff, not even an import. And everything works fine, even compiled.

Yeah, up to now the typical virus programs (which basically act upon prejudice - whoopey) seem not to have been updated, at least not Norton and Kaspersky.

The solution methods seem rather burdensome and probably fruitless. But if a compiled Python program can't run easily and peacefully in the natural environment of a user's pc, I really wonder if there's even a usage for Python outside of data science and the like.

Because clearly private people, and companies alike will continue to trust their virus softwares and refuse to install anything with a 'potential harm' label on it.

Why is other compiled software not called out?

Answer 3

false positive

Answer 4

HonFu yea that's a tough situation. installing python seems like the easiest solution, so i suggest going for that

Answer 5

hinanawi, thank you for the recommendations, I will look into these for my personal environment.

Norton, Kaspersky and these are rather omnipresent, though, so the problem remains since I can't tell people: 'No, no, don't be afraid of all these (verbose) warnings, just choose a different anti virus software than ANY of the ones you know!'

In my case I am not selling software or anything, but I want my boss to run my script, and she wants it too, because it saves her a few hours time.

But even in that situation it's already annoying. She can't easily put it on the office computer since we've got Kaspersky there.

So she would have to bring her own computer to work - that is if I can convince her that the program will really, really not do any harm to her pc. ;-)

Or she has to install Python, which has zero meaning for her.

Answer 6

Yeah, Samces, I know - but that doesn't solve the problem, since users will generally only accept a 'true negative'.

Answer 7

Can you post log from AV? I am curious because I compiled few python codes and used them across computers with different security measures without issues.

Answer 8

Samces, do you mean the reports of the anti virus programs?

I have no access to them right now (will try to look at that later).

I tried to run that exe on two different pcs, one with Norton, one with Kaspersky, different Windows versions.

Answer 9

i recommend using Avast, Malwarebytes or Protegent as those AV's have never reported python scripts as viruses

Answer 10

What about uninstalling the Virus (Norton)?

Answer 11

After renaming my script before compiling,I fixed this issue for my case.

Answer 12

Even Google Drive complains of a virus and doesn't let my friends run the stuff I send. We really need a solution.

Answer 13

hinanawi (may be left) I don't recommend avast. I have used their AVs without any problems. But I don't like the company because it has done some inappropriate things(at least i believe) and made good companies bad after taking over them.
One example is CCleaner. They totally messed our fun.

Answer 14

Hasan Aslan can you explain how you fixed your issue i want to resolve mine too, so can you help??