bugGNU Octave - Bugs: bug #65479, Many detections by several...

 
 

bug #65479: Many detections by several antivirus

Submitter:  Charles Praplan <charprap>
Submitted:  Mon 18 Mar 2024 09:04:53 AM UTC
   
 
Category:  None Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  None Assigned to:  None
Originator Name:  Charles Praplan Open/Closed:  * Open
Release:  * 9.1.0 Operating System:  * Microsoft Windows
Fixed Release:  None Planned Release:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Mon 18 Mar 2024 06:24:52 PM UTC, comment #7: 

pstoedit.exe scans showing up differently depending on whether the file is from the octave-9.1.0-w64.zip or octave-9.1.0-w64-64.zip.  file also submitted to Microsoft, trendmicro, symantec and some others who are flagging it.

Nicholas Jankowski <nrjank>
Group Member
Mon 18 Mar 2024 04:38:50 PM UTC, comment #6: 

same response with ps2edit.exe from AVG.

Nicholas Jankowski <nrjank>
Group Member
Mon 18 Mar 2024 04:33:32 PM UTC, comment #5: 

AVG files can be submitted for evaluation by users at:
https://www.avg.com/en-us/false-positive-file-form#pc

Nicholas Jankowski <nrjank>
Group Member
Mon 18 Mar 2024 04:32:11 PM UTC, comment #4: 

AVG responded to a false positive note indicated they have cleared the rbox.exe file and expect it to clear detection within 24 hours.

I'm not seeing a proxa.exe in the zip archives for 9.1.0.  is it unique to the exe installers?

Nicholas Jankowski <nrjank>
Group Member
Mon 18 Mar 2024 02:03:50 PM UTC, comment #3: 

i ran all of the 9.1.0 installers through virustotal with none getting flagged.

We have had issues in the past where individual files were getting false positives flagged by some vendors despite the installers coming back clean (some refuse to take time to scan large zip files).  AVG was a repeat offender there.

We have taken some developer time in the past to individually submit file samples to the vendors to try to whitelist the program (i think 7.2.0 was the last major headache there).  It would help if users could assist in the false positive submission requests to their respective vendors. numerous vendors ignore anything but customer requsets, each requires individual attention, etc.

Nicholas Jankowski <nrjank>
Group Member
Mon 18 Mar 2024 09:46:21 AM UTC, comment #2: 

As Markus said, this is something you have to discuss with the software manufacturer of your "antivirus software". They built the software which shows you false positives.

For reference, many others think its fine:
https://www.virustotal.com/gui/url/6e60730847f44bd13face05b771742cb4a42a7465a6ad8e4b8f6a4ce9d89bf59

Andreas Weber <andy1978>
Group Member
Mon 18 Mar 2024 09:37:48 AM UTC, comment #1: 

The binaries for MXE Octave are built from sources. The build rules are public:
https://hg.octave.org/mxe-octave

So, it is very likely that all of these are false positives.

Unfortunately, many virus scanners seem to have a high rate of false positives for binaries built with MinGW. There is nothing we can do about this. Octave has no relations to the vendors of virus scanners on Windows.

The best way forward would be to report these false positives to your virus scanner vendor and wait for them to improve their rules.
Alternatively, exclude the Octave installation folder from your virus scanner.


Markus Mützel <mmuetzel>
Group administrator
Mon 18 Mar 2024 09:04:53 AM UTC, original submission:  

I just install the latest version of Octave for windows (9.1.0).

I encountered problems with my antivirus (AVG) which moved some files to the quarantine.

I already complained about antivirus issues (bug 55688), but I think a new level has been reached.

I checked the incriminated files with virustotal and I got following results:

rbox.exe        6 detections
proxa.exe       5 detections
pstoedit.exe   18 detections  !!!

These are not false positives from only one particular vendor!

As user this is really annoying!

What do you think about this?
Thank you for your help.

Charles Praplan <charprap>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nrjank (Posted a comment)
  • -email is unavailable- added by andy1978 (Posted a comment)
  • -email is unavailable- added by charprap (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only group members can vote.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    16:35 mmuetzel Carbon-CopyRemoved 102357 -

    Back to the top

    Powered by Savane 3.13-cf05.
    Corresponding source code