mosml icon indicating copy to clipboard operation
mosml copied to clipboard

Self-installing executable for Windows 2.10.1 flagged as trojan

Open mn200 opened this issue 9 years ago • 3 comments

McAfee on my corporate windows test machine sees the download as Artemis!909EB37BCC9E

mn200 avatar Oct 05 '16 05:10 mn200

This is caused by Moscow ML's linking process that prepends a binary header onto the runtime when one creates stand-alone executables. This is supposedly also how some vira are made. How much of header.exe has in common with the virus McAfees identifies it as, I don't know.

I suspect fixing this isn't high on the list.

sshine avatar Nov 25 '16 16:11 sshine

It is high on the fixing list, currently I'm trying to find out how to report this as a false positive to McAfee (which is the approach I've been recommended by GitHub). Alas, as it has been more than a decade since I used Windows in anger, I'm rather handicapped wrt the eco-system. Thus, it is taking longer than expected.

kfl avatar Nov 28 '16 10:11 kfl

Certainly, that'd make life here much easier (aiming to make a Windows version of HOL).

mn200 avatar Nov 28 '16 22:11 mn200