Printrun icon indicating copy to clipboard operation
Printrun copied to clipboard

Pronterface (current release) is infected with malware.

Open JerryDennisEasley opened this issue 3 years ago • 7 comments

JerryDennisEasley avatar Mar 01 '21 20:03 JerryDennisEasley

It is not. See #1159 - it's a false positive

kliment avatar Mar 01 '21 20:03 kliment

image

JerryDennisEasley avatar Mar 01 '21 20:03 JerryDennisEasley

Please use the "report as false positive" option if you can. It's being detected because it has a python interpreter in it, which several forms of malware also do.

kliment avatar Mar 01 '21 21:03 kliment

Apparently the same thing happens quite regularly - here's an example of one, here is another

kliment avatar Mar 01 '21 21:03 kliment

I also encountered this. Note: Windows Defender doesn't seem to have a "report as false positive" option. I'll try to dig a little deeper on that.

BurtHarris avatar Mar 03 '21 00:03 BurtHarris

Here's the link to submit an antivirus false positive report to Microsoft. It would probably be more effective if one of the printrun developers submitted it.

I can confirm that the contents of pronterface-windows-x64_3.8-2.0.0rc8.zip are triggering Windows Defender. Defender identifies the threat as Trojan:Script/Woreflint.A!cl

BurtHarris avatar Mar 03 '21 01:03 BurtHarris

No need for doing this. Windows will send an false positive if you allow to send a notice. In general nearly each new program have this problem if it is not known as new version - and even if a company have send out a report in advanced. BTW: I never got a warning from AV for Pronterface, and this is why: https://www.virustotal.com/gui/file/3d6a2ed084e6d222c9e7e7613bfd19b3930962634de36bf87b8f78cee91e7f7a/detection

There are several free services on internet available to check for false positive behaviors. Just use them. This will help most to get good maintained and up to date databases for AV programs.

DivingDuck avatar Mar 03 '21 08:03 DivingDuck