Flagged as a trojan on WIndows about pytranscriber HOT 12 CLOSED

Hi @cluthz
Thanks for reporting.

We had this type of issues before. Python frozen apps are usually false flagged by AV.
I will submit for Microsoft for Analysis and this should stop happening on next couple of days.

Thanks

from pytranscriber.

Just submitted both to MS

from pytranscriber.

Same happened to Windows 11 with Crowdstrike

from pytranscriber.

Follows the Microsoft Analysis saying it is NOT a malware for installer binary and next version of definitions won't flag it anymore.

from pytranscriber.

Regarding portable version it's still being false positively flagged. Working on it.
As a workaround please please use the installer version for now if possible.

from pytranscriber.

The installer version is generated from the portable version using the Inno Setup script available at https://github.com/raryelcostasouza/pyTranscriber/blob/master/script-installer-windows.iss with no modifications on binary.

So it's non sense the installer version being whitelisted and the portable being flagged... we resubmitted to Microsoft providing this details

from pytranscriber.

Thanks for your hard work.

I tried the installer version now, it is allowed to install, but as soon as I launch it, it get's flagged.
I did update windows defender and ran the commands suggested. Maybe I have to wait a day or two before updated are getting pushed?

C:\Program Files\Windows Defender>MpCmdRun.exe -removedefinitions -dynamicsignatures

Service Version: 4.18.2211.5
Engine Version: 1.1.19900.2
AntiSpyware Signature Version: 1.381.1331.0
AntiVirus Signature Version: 1.381.1331.0

Starting Dynamic Signature removal.
Done!

Service Version: 4.18.2211.5
Engine Version: 1.1.19900.2
AntiSpyware Signature Version: 1.381.1331.0
AntiVirus Signature Version: 1.381.1331.0

C:\Program Files\Windows Defender>MpCmdRun.exe -SignatureUpdate
Signature update started . . .
Signature update finished. No updates needed

C:\Program Files\Windows Defender>

from pytranscriber.

Portable version was also confirmed NOT to be malware:

Please update your Windows Defender definitions and retry. If you feel confortable with command line you may also try this commands provided by Microsoft to update your definitions:

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

from pytranscriber.

Hi @cluthz. You can try again tomorrow and let us know if the issue persists.

from pytranscriber.

I can confirm that it no longer flags as malware!

Thanks!

from pytranscriber.

Glad to hear that. You're welcome

from pytranscriber.

Hi users please retry with repacked version. Now the app does not extracts itself on every execution to temp folder... not triggering further alarms from major vendors. Thanks

from pytranscriber.