Re: py2exe output flagged as malware

2018-02-28 Thread Hartmut Goebel
Am 28.02.2018 um 16:47 schrieb Robin Becker:
> I upgraded pyinstaller using the very latest pip and now the version
> of pyinstaller at least is 3.3.1. I don't actually know how to check
> the validity of the installed code or the binary stubs. 

The current archives are PyPI are PGP/GnuPG-signed, as the ones at github.

-- 
Schönen Gruß
Hartmut Goebel
Dipl.-Informatiker (univ), CISSP, CSSLP, ISO 27001 Lead Implementer
Information Security Management, Security Governance, Secure Software
Development

Goebel Consult, Landshut
http://www.goebel-consult.de

Blog:
http://www.goebel-consult.de/blog/nicht-pgp-ist-gescheitert-die-entwickler-haben-versagt

Kolumne: http://www.cissp-gefluester.de/2012-02-bring-your-own-life-glosse

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: py2exe output flagged as malware

2018-02-28 Thread Robin Becker

On 28/02/2018 16:25, Hartmut Goebel wrote:

Am 28.02.2018 um 16:47 schrieb Robin Becker:

I upgraded pyinstaller using the very latest pip and now the version
of pyinstaller at least is 3.3.1. I don't actually know how to check
the validity of the installed code or the binary stubs.


The current archives are PyPI are PGP/GnuPG-signed, as the ones at github.


so presumably I can locate the downloaded tar zip and hash it to check. Of 
course if pip is already busted it can out fox me anyhow.
--
Robin Becker

--
https://mail.python.org/mailman/listinfo/python-list


Re: py2exe output flagged as malware

2018-02-28 Thread Hartmut Goebel
Am 28.02.2018 um 16:47 schrieb Robin Becker:
> I upgraded pyinstaller using the very latest pip and now the version
> of pyinstaller at least is 3.3.1. I don't actually know how to check
> the validity of the installed code or the binary stubs. 

The current archives are PyPI are PGP/GnuPG-signed, as the ones at github.

-- 
Regards
Hartmut Goebel

| Hartmut Goebel  | h.goe...@crazy-compilers.com   |
| www.crazy-compilers.com | compilers which you thought are impossible |

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: py2exe output flagged as malware

2018-02-28 Thread Robin Becker

On 28/02/2018 11:46, alister via Python-list wrote:

On Wed, 28 Feb 2018 09:53:09 +, Robin Becker wrote:


I see this has happened to others in the past. I'm using 32 bit python
2.7.10 with py2exe 3.3 on windows 7. The exes work fine,
but when I try to download into windows 10 I'm getting the exes
immediately removed as malware.

Is there any way to prevent this. It's very bad for python programs to
get this kind of reputation.

Anyone know if the same happens with PyInstaller etc etc?


I would suggest you contact the Anti-virus vendor,
Are you sure you have download a clean copy of py2exe.



The anti-virus vendor is Microsoft; I imagine I will get short shrift from them 
regarding this issue.

Turns out my py2exe script was just pyinstaller under the hood. Apologies to 
py2exe.

I guess someone changed the build script script to use a different python 
packager.

I upgraded pyinstaller using the very latest pip and now the version of pyinstaller at least is 3.3.1. I don't actually know how 
to check the validity of the installed code or the binary stubs.


After rebuilding with 3.3.1 the new exe is 10 bytes shorter and is not 
recognized as malware by windows 10.
--
Robin Becker

--
https://mail.python.org/mailman/listinfo/python-list


Re: py2exe output flagged as malware

2018-02-28 Thread alister via Python-list
On Wed, 28 Feb 2018 09:53:09 +, Robin Becker wrote:

> I see this has happened to others in the past. I'm using 32 bit python
> 2.7.10 with py2exe 3.3 on windows 7. The exes work fine,
> but when I try to download into windows 10 I'm getting the exes
> immediately removed as malware.
> 
> Is there any way to prevent this. It's very bad for python programs to
> get this kind of reputation.
> 
> Anyone know if the same happens with PyInstaller etc etc?

I would suggest you contact the Anti-virus vendor,
Are you sure you have download a clean copy of py2exe.



-- 
There are two ways to write error-free programs; only the third one works.
-- 
https://mail.python.org/mailman/listinfo/python-list