PyInstaller executables are, unfortunately, regularly flagged as malware by antivirus providers. We (the developers) believe it's the bootloaders that are causing the issue - when people build malware using PyInstaller (which we're sure some people do, like with any compiler/build tool) the AVs flag the file as malicious, and the bootloader is the only common component between them all. All you can do is report the file as a false positive.
Signing the exe file can also help prevent this from happening. Jasper Harrison, aka Legorooj Core Developer on PyInstaller ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Monday, October 18th, 2021 at 11:37, RapidTech 1898 <[email protected]> wrote: > Hello, > > i compiled a python-program with pyinstaller and my client told me that their > AVL-virus protection classifies the exe as a trojan... > (i am using windows defender and had never an alert in the past) > > So i checked it with virustotal.com and indeed 3 security vendors flagged the > file as malicious...[checkVirus.png] > > Due that my client is suspicious about the file - is there anything i can do > about that? > > Find attached the output from virustotal.com. > > Thanks and kind regards, > Markus > > -- > You received this message because you are subscribed to the Google Groups > "PyInstaller" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > [https://groups.google.com/d/msgid/pyinstaller/3d6c1075-ef36-4476-acc4-5650dd4374e8n%40googlegroups.com](https://groups.google.com/d/msgid/pyinstaller/3d6c1075-ef36-4476-acc4-5650dd4374e8n%40googlegroups.com?utm_medium=email&utm_source=footer). -- You received this message because you are subscribed to the Google Groups "PyInstaller" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/pyinstaller/HBj9Qvcw62wYCEjxhQk7b-yQkCG505r5SL0j--FTlJgSzkFO01QzjyCLaG9NaNV6dTc-KOPRYGLVT3aw7ljGyQYTMeeuCA2fAFUFsctoTjk%3D%40protonmail.com.
