_adv.cp311-win_amd64.pyd as Trojan:Script/Sabsik.FL.B!ml

wxPython Users
#1

Hi,

I installed wxPython 4.2.1 for Python 3.11 on Windows 10 in a pipenv.
When I started my application Windows Defender detects _adv.cp311-win_amd64.pyd as a virus Trojan:Script/Sabsik.FL.B!ml.
How realistic is this?

#2

Since I gave up running Windows several years ago, I have lost touch with the details of details of handling viruses. I do remember there were some sites where you could upload suspect files to check for false positives for example: Virus Total

#3

I’d say it’s an extremely low chance that it is a correct diagnosis. However, I would recommend checking the hashes on the downloaded wheel file, if you haven’t already, even if it’s just for your own peace of mind.

You can use pip download wxPython to get the wheel file without installing it, use sha265sum to calculate its hash value, and then compare that with the value shown on pypi.org. I’ve done that for wxPython-4.2.1-cp311-cp311-win_amd64.whl, and also checked the hash of the pre-upload version of the wheel file on my local machine, and they all match up.

#4

Thanks for the answer. Will try that.

#5

Not unexpected, it was a false positive.
Thanks again to both of you.