[issue19913] TR/Crypt.XPACK.Gen-4 in easy_install.exe

[Vinay Sajip]

Vinay Sajip added the comment:

Hmmm. I use mpress (http://www.matcode.com/mpress.htm) to compress the executables. These AV results seem to be false positives, given that the files are green-lit by Symantec, Sophos, McAfee, Kaspersky, F-Prot, AVG, Avast and a bunch of other reputable AV products (based on Christian's links).

I suppose the executables could be shipped uncompressed (apparently the UPX compressor also sometimes causes false positives with AV software - and UPX can't compress 64-bit executables).

There have been complaints in the past that Avira's heuristics are not careful enough:

https://forum.avira.com/wbb/index.php?page=Thread&threadID=127271

That link points to a 2011 thread.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue19913>
_______________________________________