[vtkusers] Kaspersky 2016 reports a virus in the windows installer for version 7.0.0

[David E DeMarle]

I think it is a false positive.

Although kaspersky's online checker
complained about the pyd files with the mysterious
UDS.DangerousObject.Multi.Generic problem, a local check with a fully
updated Kaspersky anti-virus 2016 trial version did not.

Our build machines are virus checker protected in any case so it is
unlikely to be a real threat. I think it is more likely that Kaspersky is
being over protective as VTK isn't all that common in the scale of things.

We will continue to try and work it out with Kaspersky in any case.


David E DeMarle
Kitware, Inc.
R&D Engineer
21 Corporate Drive
Clifton Park, NY 12065-8662
Phone: 518-881-4909

On Tue, Jun 28, 2016 at 10:27 AM, Michael Grabietz <
michael.grabietz at img-online.de> wrote:

> Hi David,
>
> thanks for your reply.
>
> Current status of the installer listed on virustotal.
>
>
> https://legacy.virustotal.com/en/file/6b090fb40050e45feb5bfaca1c29056a89e25497828d00a785548b579b716a36/analysis/
>
> Best Regards, Michael
>
>
>
> Am 28.06.2016 um 16:02 schrieb David E DeMarle:
> > Michael,
> >
> > We've had false positives like this before so I assume and hope this is
> > another case of that happening. We'll investigate and report back when
> > we know more.
> >
> > thanks,
> >
> >
> > David E DeMarle
> > Kitware, Inc.
> > R&D Engineer
> > 21 Corporate Drive
> > Clifton Park, NY 12065-8662
> > Phone: 518-881-4909
> >
> > On Tue, Jun 28, 2016 at 9:39 AM, Michael Grabietz
> > <michael.grabietz at img-online.de <mailto:michael.grabietz at img-online.de>>
> > wrote:
> >
> >     Hello,
> >
> >     I just downloaded the vtk7-Installer for Windows. I want to install
> vtk
> >     under Windows 10. Kaspersky Internet Security 2016 is running on the
> PC.
> >
> >     I used the following installer:
> >
> >
> http://www.vtk.org/files/release/7.0/vtkpython-7.0.0-Windows-64bit.exe
> >
> >     Kaspersky 2016 is up to date.
> >
> >
> >     When I start the installer Kaspersky reports an issue with the file.
> A
> >     virus was detected. Name or type of the virus is reported as
> >     'UDS:DangerousObject.Multi.Generic'.
> >
> >     When VTK 7.0.0 is installed Kaspersky reports every *.pyd file in the
> >     directory C:\Program Files\VTK 7.0.0\bin\Lib\site-packages\vtk as
> >     infected by 'UDS:DangerousObject.Multi.Generic' too. 85 files were
> >     quarantined.
> >
> >     vtkChartsCorePython.pyd                   Date: 2016-01-28 21:00
> >     vtkCommonColorPython.pyd                  Date: 2016-01-28 20:55
> >     vtkCommonComputationalGeometryPython.pyd
> >     ...
> >     vtkViewsInfovisPython.pyd
> >
> >
> >     I checked these files on various computers running different virus
> >     scanners like F-Secure and even Kaspersky 2015 (not 2016!) with up to
> >     date data bases. They don't complain.
> >
> >     Further I checked vtkChartsCorePython.pyd on the Kaspersky Site.
> There
> >     is a possibility to upload files for checking. It is reported as
> >     infected. Maybe somebody can give it a try and uploads one of these
> pyd
> >     files to the Kaspersky site to verify this behaviour.
> >
> >     I hope it is a false positive. Do you had already some similar issues
> >     like that? I am rather confused, since I cannot find any suitable
> >     information in the web about this issue.
> >
> >
> >     Best regards, Michael
> >
> >     _______________________________________________
> >     Powered by www.kitware.com <http://www.kitware.com>
> >
> >     Visit other Kitware open-source projects at
> >     http://www.kitware.com/opensource/opensource.html
> >
> >     Please keep messages on-topic and check the VTK FAQ at:
> >     http://www.vtk.org/Wiki/VTK_FAQ
> >
> >     Search the list archives at: http://markmail.org/search/?q=vtkusers
> >
> >     Follow this link to subscribe/unsubscribe:
> >     http://public.kitware.com/mailman/listinfo/vtkusers
> >
> >
>
> --
>  Michael Grabietz
>
>  IMG - Ingenieurbuero Michael Grabietz
>  Stauferring 56
>  97941 Tauberbischofsheim
>  Germany
>
>  Fon: +49 9341 89 66 70
>  Fax: +49 9341 89 66 71
>
>  michael.grabietz at img-online.de
>  www.img-online.de
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://public.kitware.com/pipermail/vtkusers/attachments/20160629/2a721813/attachment.html>