Virus in Mapillary desktop uploader 4.7.0

My virus scanner dectected a virus in Mapillary desktop uploader version 4.7.0

HEUR/APC

  • C:\Users\Louis\AppData\Local\Programs\mapillary-desktop-uploader\resources\static\mapillary_tools\mapillary_upload_cli-win32.exe - In quarantaine

This is a false positive that sometimes appears as we pack our executables for Mapillary tools with Pyinstaller and some antivirus software can sometimes flag them. The bundled executable is from Release v0.13.3 · mapillary/mapillary_tools · GitHub Check your anti virus software for options to remove a file from quarantine or specify an exemption.

No, and I really hate to disagree with you @nikola but the solution is to add an Authenticode signature to Mapillary’s Windows executable. If you need or want to build the Windows executable on a POSIX system then you can use Mono’s signcode in place of SignTool.exe.

3 Likes

Just FYI @nikola:
Alternatively, you could provide a free of charge MSIX package on the Microsoft Store. It is really easy to build and even easier to manage because the store provides automatic updates. The Microsoft Store signs MSIX packages automatically by design with its store certificate, so that you would be relieved of managing your private key and code signing certificate. MSIX and APPX apps are installed into a special Windows managed location which is usually automatically exempt from anti-virus scanning because all files there come from a trusted source. I do not know whether the Microsoft Store also signs any signable package artifacts, like exe, dll, cab, msi, ocx, sys, etc. files (would be nice and smart if they did).

1 Like

That’s a good idea, we’ll look into that as an option!

2 Likes