CustomTkinter icon indicating copy to clipboard operation
CustomTkinter copied to clipboard

Windows 11 Trojan:Win32/Wacatac.B!ml when using CustomTkInter in a pyinstaller

Open hansvdam opened this issue 1 year ago • 5 comments

I spend a long time nailing this down to the source and finally removed CustomTkinter from my codebase. I want to leave some trace, because I could not find anything about this online: I used it in an application (for windows and mac) in a pyinstaller and for windows packed using an inno-installer. Windows Security flags the installer as Trojan:Win32/Wacatac.B!ml when I include CustomTkinter (and darkdetect) in the build. Without it everything is fine.

hansvdam avatar Dec 13 '24 16:12 hansvdam

buy a certificate and make a digital signature, the library is not to blame for this in any way

MAINER4IK avatar Dec 14 '24 03:12 MAINER4IK

It's not a problem with the library itself. Getting flags from antivirus software like this is common when using PyInstaller and Inno Setup.

Solutions:

Invest in a Software Signing Certificate: If you plan to work on larger projects, obtaining a software signing certificate is recommended. OR Avoid Using Inno Setup: Instead, try distributing a one-file executable created using PyInstaller. Check this: #939

Experiment with Executable Packing: Check which files and libraries are triggering the antivirus.

Check in VirusTotal: Upload the executable to VirusTotal.com to check the false positive rating. If you encounter serious detections, try to contact the antivirus vendors to remove the false positives, in case you are distributing the executables in public. But 2-5 false detections are common if it's not signed.

Akascape avatar Jan 18 '25 16:01 Akascape

It is all digitally signed using windows secure signing etc. I just decided not to use this lib anymore and I'm fine.

hansvdam avatar Feb 01 '25 08:02 hansvdam

some dumbshit decided to use pyinstaller for a virus, so microsoft flaggs it, its not the library's fault its the guy who used it in that way's fault

Sonic3Modder avatar Apr 27 '25 23:04 Sonic3Modder