Teiji Posted July 3 ID:1646687 Share Posted July 3 (edited) Hello, I created this Python app called Vulcan. It is a simple GUI to change batch files and denoising files (vpy) provided by the app. Repository link: https://github.com/teijiIshida/Vulcan The app is compiled with Cython and pyinstaller/auto-py-to-exe. 2656780 INFO: PyInstaller: 6.8.0, contrib hooks: 2024.7 2656781 INFO: Python: 3.12.3 It is not released to the public yet, however, I know that Python app compiled with pyinstaller tend to generate these false detections. If you need the batch files or the exe, I can send them to you but not publicly (because it's not a free app). I request the Malwarebytes team to kindly remove this detection and/or whitelist it. Thank you. MBAM_log_240703.txt Edited July 26 by AdvancedSetup Disabled hyperlinks Link to post Share on other sites More sharing options...
Staff blender Posted July 3 Staff ID:1646711 Share Posted July 3 Hello, This should no longer be detected. Thank you for reporting. Link to post Share on other sites More sharing options...
Teiji Posted July 3 Author ID:1646714 Share Posted July 3 Thank you. However, I still see it as detected on VirusTotal. Do I contact the VirusTotal team to whitelist that or is there something you can do about it too? https://www.virustotal.com/gui/file/45dc76b21c0b83e1ba5d490e91c5a4fab3cee6441288c918cd64ce9427b016ca I'm trying to report my app as false positive on other vendors too. Link to post Share on other sites More sharing options...
David H. Lipman Posted July 3 ID:1646719 Share Posted July 3 You did not update the Virus Total Report. I did, just now, and now it no longer shows a detection by Malwarebytes. 1 Link to post Share on other sites More sharing options...
Teiji Posted July 3 Author ID:1646720 Share Posted July 3 Thank you! Link to post Share on other sites More sharing options...
David H. Lipman Posted July 3 ID:1646721 Share Posted July 3 Link to post Share on other sites More sharing options...
Teiji Posted July 26 Author ID:1651219 Share Posted July 26 (edited) Hello, I updated my app to V2 and now it's being detected as Malware.AI.2463753164. My app is still a simple GUI to change batch files and denoising files (vpy) provided by the app. It does NOT collect or nor store any personal information, does NOT connect to the internet, does NOT change any Windows, browser, or registry settings, etc. Repository link: https://github.com/teijiIshida/Vulcan VirusTotal link: https://www.virustotal.com/gui/file/e0c588e1430b7684bdbac9b1fda0b02f9dfd08d38d890cb92e88abd5285bb266?nocache=1 The app was compiled with Cython and pyinstaller/auto-py-to-exe (auto-py-to-exe v2.44.1) 2514861 INFO: PyInstaller: 6.9.0, contrib hooks: 2024.7 2514868 INFO: Python: 3.12.3 I kindly request that you remove this false positive detection and whitelist it. Thank you. Malwarebytes Scan Report 2024-07-26 153028.txt Edited July 26 by AdvancedSetup Disabled hyperlinks Link to post Share on other sites More sharing options...
Staff blender Posted July 26 Staff ID:1651276 Share Posted July 26 Hello again, Should be good to go. Whitelisted. VT no longer detects it (MBAM engine) either. Thank you for reporting. Link to post Share on other sites More sharing options...
Teiji Posted July 26 Author ID:1651278 Share Posted July 26 Thank you so much again! You guys are the fastest when it comes to whitelisting false positive. Link to post Share on other sites More sharing options...
Teiji Posted August 4 Author ID:1653036 Share Posted August 4 Hello, I just updated my app to v2.1. Everything is the same as before (with a minor GUI change). It is being falsely detected again as Malware.AI.4174605144 VirusTotal link: https://www.virustotal.com/gui/file/4e3b7bee0fc9479e425743d0e10453886c7ee7483a7c38657a484e473be875ef?nocache=1 The app was compiled with Cython and pyinstaller/auto-py-to-exe (auto-py-to-exe v2.44.1) 53466 INFO: PyInstaller: 6.9.0, contrib hooks: 2024.7 53478 INFO: Python: 3.12.3 53498 INFO: Platform: Windows-11-10.0.22631-SP0 Can you guys remove this false positive detection and whitelist it? Thank you. Malwarebytes Scan Report 2024-08-04 225436.txt Link to post Share on other sites More sharing options...
Teiji Posted August 6 Author ID:1653390 Share Posted August 6 Attached is the false positive file. Vulcan.zip Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now