关注我项目中的恶意库 [英] Concerned about malicious libraries in my project

问题描述

所以一段时间以来，我一直在用 python 构建我的虚拟助手，这需要使用几个外部库.我也一直在使用pyinstaller将脚本转换为exe.但是直到前几天，Windows Defender告诉我，出了点问题，这只会影响我创建的exe文件.

So for a while now I have been building my virtual assistant in python which has required the use of several external libraries. I have also been converting the scripts to an exe using pyinstaller. However only the other day, windows defender told me that there was something wrong which was only affecting the exe file I had created

它说 Trojan:Win32/Wacatac.C！ml

我只是不了解现在是如何进行标记的，而不是在考虑我已经在这个项目上工作了一个多月之前.

I simply don't understand how this was only flagged up now and not before considering I have been working on this project for over a month now.

以下是我使用过的模块的列表:

Here is a list of the modules I have used:

newsapi，Wikipedia，线程，自动更正，随机，时间，电子邮件，日历，日期时间，数学，sys，webbrowser，pyttsx3，io，speech_recognition，imaplib，pickle，wmi，docx，comtypes，googletrans，qhue，pyowm，ast，pyaudio，pycaw，tkinter，smtplib，电子邮件，bs4，请求

newsapi, Wikipedia, threading, autocorrect, random, time,email, calendar, datetime, math, sys, webbrowser, pyttsx3, io, speech_recognition,imaplib, pickle, wmi, docx, comtypes, googletrans, qhue, pyowm, ast, pyaudio, pycaw, tkinter, smtplib, email, bs4, requests

推荐答案

这是一个误报.您的第三方模块没有任何恶意，问题与PyInstaller有关.

It's a false positive. There's nothing malicious about your third-party modules, the issue has to do with PyInstaller.

PyInstaller带有预编译的引导加载程序二进制文件.由于许多实际的业余病毒都是用Python编写的，然后使用PyInstaller转换为可执行文件，因此大多数防病毒软件会将这些预编译的Bootloader二进制文件标记为恶意.唯一真正的解决方案是编译您自己的引导程序.

PyInstaller comes with pre-compiled bootloader binaries. Since many actual amateur viruses are written in Python, and then converted to executables using PyInstaller, most anti-virus software will flag those pre-compiled bootloader binaries as being malicious. The only real solution is to compile your own bootloader.

这篇关于关注我项目中的恶意库的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！