[vtkusers] Kaspersky 2016 reports a virus in the windows installer for version 7.0.0

[Michael Grabietz]

Hi David,

thanks for your reply.

Current status of the installer listed on virustotal.

https://legacy.virustotal.com/en/file/6b090fb40050e45feb5bfaca1c29056a89e25497828d00a785548b579b716a36/analysis/

Best Regards, Michael



Am 28.06.2016 um 16:02 schrieb David E DeMarle:
> Michael,
> 
> We've had false positives like this before so I assume and hope this is
> another case of that happening. We'll investigate and report back when
> we know more.
> 
> thanks,
> 
> 
> David E DeMarle
> Kitware, Inc.
> R&D Engineer
> 21 Corporate Drive
> Clifton Park, NY 12065-8662
> Phone: 518-881-4909
> 
> On Tue, Jun 28, 2016 at 9:39 AM, Michael Grabietz
> <michael.grabietz at img-online.de <mailto:michael.grabietz at img-online.de>>
> wrote:
> 
>     Hello,
> 
>     I just downloaded the vtk7-Installer for Windows. I want to install vtk
>     under Windows 10. Kaspersky Internet Security 2016 is running on the PC.
> 
>     I used the following installer:
> 
>     http://www.vtk.org/files/release/7.0/vtkpython-7.0.0-Windows-64bit.exe
> 
>     Kaspersky 2016 is up to date.
> 
> 
>     When I start the installer Kaspersky reports an issue with the file. A
>     virus was detected. Name or type of the virus is reported as
>     'UDS:DangerousObject.Multi.Generic'.
> 
>     When VTK 7.0.0 is installed Kaspersky reports every *.pyd file in the
>     directory C:\Program Files\VTK 7.0.0\bin\Lib\site-packages\vtk as
>     infected by 'UDS:DangerousObject.Multi.Generic' too. 85 files were
>     quarantined.
> 
>     vtkChartsCorePython.pyd                   Date: 2016-01-28 21:00
>     vtkCommonColorPython.pyd                  Date: 2016-01-28 20:55
>     vtkCommonComputationalGeometryPython.pyd
>     ...
>     vtkViewsInfovisPython.pyd
> 
> 
>     I checked these files on various computers running different virus
>     scanners like F-Secure and even Kaspersky 2015 (not 2016!) with up to
>     date data bases. They don't complain.
> 
>     Further I checked vtkChartsCorePython.pyd on the Kaspersky Site. There
>     is a possibility to upload files for checking. It is reported as
>     infected. Maybe somebody can give it a try and uploads one of these pyd
>     files to the Kaspersky site to verify this behaviour.
> 
>     I hope it is a false positive. Do you had already some similar issues
>     like that? I am rather confused, since I cannot find any suitable
>     information in the web about this issue.
> 
> 
>     Best regards, Michael
> 
>     _______________________________________________
>     Powered by www.kitware.com <http://www.kitware.com>
> 
>     Visit other Kitware open-source projects at
>     http://www.kitware.com/opensource/opensource.html
> 
>     Please keep messages on-topic and check the VTK FAQ at:
>     http://www.vtk.org/Wiki/VTK_FAQ
> 
>     Search the list archives at: http://markmail.org/search/?q=vtkusers
> 
>     Follow this link to subscribe/unsubscribe:
>     http://public.kitware.com/mailman/listinfo/vtkusers
> 
> 

-- 
 Michael Grabietz

 IMG - Ingenieurbuero Michael Grabietz
 Stauferring 56
 97941 Tauberbischofsheim
 Germany

 Fon: +49 9341 89 66 70
 Fax: +49 9341 89 66 71

 michael.grabietz at img-online.de
 www.img-online.de