persepolis_5.0.1.0 GOT 1 HIT ON VIRUS TOTAL . IS IT FALSE POSITIVE . CAN IT BE IGNORED. Threat name = W32.AIDetectMalware

[Javacmd]

System Details:

• Operating System: windows 10 22H2 64 bit os i5-6300U CPU

• Distro(For GNU/Linux and BSD users): ?

• Desktop Environment(For GNU/Linux and BSD users): ?

• Persepolis Version: current latest version 5.0.1.0

• How do you install Persepolis? (Repositories, source, ...)

• Please attach log files if crash or paste error message

Issue Description and steps to reproduce:

Write in English language please, Thanks :)

Feel free to edit or delete lines in this template if it is necessary.

Please report only one Issue (Bug or feature request or ...) in one issue! and open new Issue for another one :)

[mostafaasadi]

since version 5.0.1 the windows bundle is packaging by an automated ci/cd on github action
and now i checked the bundle with VirusTotal and we don't have any red alarm

No security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/1897d62287c5f8eed880e449411d679ef8b48374efc7e8c3c30ebb1616a22592?nocache=1

[CarlosVGonzalez]

It does give a Virus Alert with Windows Defender: Trojan:Win32/Pomal!rfn on persepolis_5.1.0.0_windows_64bit.exe latest installer on file file: C:\Program Files\Persepolis Download Manager\Persepolis Download Manager.exe

[mostafaasadi]

Hi everyone,

Thank you for your continued patience and for reporting the issues regarding antivirus detections with previous versions of Persepolis. We understand your concerns, especially regarding flags from multiple AV engines on VirusTotal, including Windows Defender.

We're pleased to share some positive news. With our latest version, we've seen a significant reduction in these false positives. According to the most recent VirusTotal scan (link to new scan), only one less-common antivirus engine is currently flagging the software. This is a substantial improvement, and we believe it reflects the ongoing work to address this.

We believe there is no malicious code or infection in Persepolis, as you can see the software is open-source and free, and the build process is automated and transparent. The instances where some antivirus programs flag Persepolis are likely due to errors or excessive sensitivity to certain processes.

It's also important to note that our releases are built automatically on GitHub's servers using GitHub Actions. This ensures a clean and consistent build environment.

We are actively working on more robust, long-term solutions to eliminate these false positives entirely. Our current efforts, which we've been focusing on recently, include:

• Code Signing: Implementing digital signatures for our code to verify its authenticity and integrity.

• Microsoft Partner Center Registration: We are in the process of registering our software with the Microsoft Partner Center, which can help improve its reputation with Windows Defender and other Microsoft services.

• Exploring Build Process Alternatives: We are investigating and experimenting with alternatives to PyInstaller, looking into more direct compilation methods. You can follow some of this progress in our persepolis-auto-build repository

We are committed to resolving this issue and appreciate your understanding and support as we work through these steps. We'll keep you updated on our progress.