<div dir="ltr"><div>I think it is a false positive.</div><div><br></div><div>Although kaspersky's online checker </div><div>complained about the pyd files with the mysterious UDS.DangerousObject.Multi.Generic problem, a local check with a fully updated Kaspersky anti-virus 2016 trial version did not.</div><div><br></div><div>Our build machines are virus checker protected in any case so it is unlikely to be a real threat. I think it is more likely that Kaspersky is being over protective as VTK isn't all that common in the scale of things.</div><div><br></div><div>We will continue to try and work it out with Kaspersky in any case.</div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature">David E DeMarle<br>Kitware, Inc.<br>R&D Engineer<br>21 Corporate Drive<br>Clifton Park, NY 12065-8662<br>Phone: 518-881-4909</div></div>
<br><div class="gmail_quote">On Tue, Jun 28, 2016 at 10:27 AM, Michael Grabietz <span dir="ltr"><<a href="mailto:michael.grabietz@img-online.de" target="_blank">michael.grabietz@img-online.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi David,<br>
<br>
thanks for your reply.<br>
<br>
Current status of the installer listed on virustotal.<br>
<br>
<a href="https://legacy.virustotal.com/en/file/6b090fb40050e45feb5bfaca1c29056a89e25497828d00a785548b579b716a36/analysis/" target="_blank" rel="noreferrer">https://legacy.virustotal.com/en/file/6b090fb40050e45feb5bfaca1c29056a89e25497828d00a785548b579b716a36/analysis/</a><br>
<br>
Best Regards, Michael<br>
<span><br>
<br>
<br>
Am 28.06.2016 um 16:02 schrieb David E DeMarle:<br>
> Michael,<br>
><br>
> We've had false positives like this before so I assume and hope this is<br>
> another case of that happening. We'll investigate and report back when<br>
> we know more.<br>
><br>
> thanks,<br>
><br>
><br>
> David E DeMarle<br>
> Kitware, Inc.<br>
> R&D Engineer<br>
> 21 Corporate Drive<br>
> Clifton Park, NY 12065-8662<br>
> Phone: <a href="tel:518-881-4909" value="+15188814909">518-881-4909</a><br>
><br>
> On Tue, Jun 28, 2016 at 9:39 AM, Michael Grabietz<br>
</span>> <<a href="mailto:michael.grabietz@img-online.de">michael.grabietz@img-online.de</a> <mailto:<a href="mailto:michael.grabietz@img-online.de">michael.grabietz@img-online.de</a>>><br>
<div><div class="h5">> wrote:<br>
><br>
> Hello,<br>
><br>
> I just downloaded the vtk7-Installer for Windows. I want to install vtk<br>
> under Windows 10. Kaspersky Internet Security 2016 is running on the PC.<br>
><br>
> I used the following installer:<br>
><br>
> <a href="http://www.vtk.org/files/release/7.0/vtkpython-7.0.0-Windows-64bit.exe" target="_blank" rel="noreferrer">http://www.vtk.org/files/release/7.0/vtkpython-7.0.0-Windows-64bit.exe</a><br>
><br>
> Kaspersky 2016 is up to date.<br>
><br>
><br>
> When I start the installer Kaspersky reports an issue with the file. A<br>
> virus was detected. Name or type of the virus is reported as<br>
> 'UDS:DangerousObject.Multi.Generic'.<br>
><br>
> When VTK 7.0.0 is installed Kaspersky reports every *.pyd file in the<br>
> directory C:\Program Files\VTK 7.0.0\bin\Lib\site-packages\vtk as<br>
> infected by 'UDS:DangerousObject.Multi.Generic' too. 85 files were<br>
> quarantined.<br>
><br>
> vtkChartsCorePython.pyd Date: 2016-01-28 21:00<br>
> vtkCommonColorPython.pyd Date: 2016-01-28 20:55<br>
> vtkCommonComputationalGeometryPython.pyd<br>
> ...<br>
> vtkViewsInfovisPython.pyd<br>
><br>
><br>
> I checked these files on various computers running different virus<br>
> scanners like F-Secure and even Kaspersky 2015 (not 2016!) with up to<br>
> date data bases. They don't complain.<br>
><br>
> Further I checked vtkChartsCorePython.pyd on the Kaspersky Site. There<br>
> is a possibility to upload files for checking. It is reported as<br>
> infected. Maybe somebody can give it a try and uploads one of these pyd<br>
> files to the Kaspersky site to verify this behaviour.<br>
><br>
> I hope it is a false positive. Do you had already some similar issues<br>
> like that? I am rather confused, since I cannot find any suitable<br>
> information in the web about this issue.<br>
><br>
><br>
> Best regards, Michael<br>
><br>
> _______________________________________________<br>
</div></div>> Powered by <a href="http://www.kitware.com" target="_blank" rel="noreferrer">www.kitware.com</a> <<a href="http://www.kitware.com" target="_blank" rel="noreferrer">http://www.kitware.com</a>><br>
<span>><br>
> Visit other Kitware open-source projects at<br>
> <a href="http://www.kitware.com/opensource/opensource.html" target="_blank" rel="noreferrer">http://www.kitware.com/opensource/opensource.html</a><br>
><br>
> Please keep messages on-topic and check the VTK FAQ at:<br>
> <a href="http://www.vtk.org/Wiki/VTK_FAQ" target="_blank" rel="noreferrer">http://www.vtk.org/Wiki/VTK_FAQ</a><br>
><br>
> Search the list archives at: <a href="http://markmail.org/search/?q=vtkusers" target="_blank" rel="noreferrer">http://markmail.org/search/?q=vtkusers</a><br>
><br>
> Follow this link to subscribe/unsubscribe:<br>
> <a href="http://public.kitware.com/mailman/listinfo/vtkusers" target="_blank" rel="noreferrer">http://public.kitware.com/mailman/listinfo/vtkusers</a><br>
><br>
><br>
<br>
</span>--<br>
Michael Grabietz<br>
<br>
IMG - Ingenieurbuero Michael Grabietz<br>
Stauferring 56<br>
97941 Tauberbischofsheim<br>
Germany<br>
<br>
Fon: <a href="tel:%2B49%209341%2089%2066%2070" value="+499341896670">+49 9341 89 66 70</a><br>
Fax: <a href="tel:%2B49%209341%2089%2066%2071" value="+499341896671">+49 9341 89 66 71</a><br>
<br>
<a href="mailto:michael.grabietz@img-online.de">michael.grabietz@img-online.de</a><br>
<a href="http://www.img-online.de" target="_blank" rel="noreferrer">www.img-online.de</a><br>
<br>
<br>
</blockquote></div><br></div>