From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Original-To: caml-list@sympa.inria.fr Delivered-To: caml-list@sympa.inria.fr Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) by sympa.inria.fr (Postfix) with ESMTPS id 8688A7EE49 for ; Sat, 14 Sep 2013 09:13:58 +0200 (CEST) Received-SPF: None (mail3-smtp-sop.national.inria.fr: no sender authenticity information available from domain of adrien@notk.org) identity=pra; client-ip=91.121.71.147; receiver=mail3-smtp-sop.national.inria.fr; envelope-from="adrien@notk.org"; x-sender="adrien@notk.org"; x-conformance=sidf_compatible Received-SPF: Pass (mail3-smtp-sop.national.inria.fr: domain of adrien@notk.org designates 91.121.71.147 as permitted sender) identity=mailfrom; client-ip=91.121.71.147; receiver=mail3-smtp-sop.national.inria.fr; envelope-from="adrien@notk.org"; x-sender="adrien@notk.org"; x-conformance=sidf_compatible; x-record-type="v=spf1" Received-SPF: None (mail3-smtp-sop.national.inria.fr: no sender authenticity information available from domain of postmaster@nautica.notk.org) identity=helo; client-ip=91.121.71.147; receiver=mail3-smtp-sop.national.inria.fr; envelope-from="adrien@notk.org"; x-sender="postmaster@nautica.notk.org"; x-conformance=sidf_compatible X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AskAANALNFJbeUeTl2dsb2JhbABbgz+DfL1RgRwWDgEBAQEBCBYHPIIlAQEFIw8BRhALGAICBRMOAgIPBRgdARMuh2wIqAiRdYEpjkgHgmk1gQADl3kBgS+Tazo X-IPAS-Result: AskAANALNFJbeUeTl2dsb2JhbABbgz+DfL1RgRwWDgEBAQEBCBYHPIIlAQEFIw8BRhALGAICBRMOAgIPBRgdARMuh2wIqAiRdYEpjkgHgmk1gQADl3kBgS+Tazo X-IronPort-AV: E=Sophos;i="4.90,902,1371074400"; d="scan'208";a="26826760" Received: from nautica.notk.org ([91.121.71.147]) by mail3-smtp-sop.national.inria.fr with ESMTP/TLS/ADH-AES256-SHA; 14 Sep 2013 09:13:58 +0200 Received: by nautica.notk.org (Postfix, from userid 1003) id 4EC44C009; Sat, 14 Sep 2013 09:13:57 +0200 (CEST) Date: Sat, 14 Sep 2013 09:13:57 +0200 From: Adrien Nader To: Jonathan Protzenko Cc: jon@ffconsultancy.com, 'caml users' Message-ID: <20130914071357.GA3569@notk.org> References: <9994E196-90F5-4396-A31D-E1C60822DED1@inria.fr> <52332161.9070404@gmail.com> <00b301ceb0d8$f291d0b0$d7b57210$@ffconsultancy.com> <52340B40.9090109@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <52340B40.9090109@gmail.com> User-Agent: Mutt/1.5.20 (2009-06-14) Subject: Re: [Caml-list] OCaml installer for Windows 4.01.0 On Sat, Sep 14, 2013, Jonathan Protzenko wrote: > Hi Jon, > > It's a known issue (see « known issues » at > http://protz.github.io/ocaml-installer/); mostly, the installer > software that I'm using gets reported as a virus by every single > antivirus out there. I haven't found a solution to the problem, except > for reporting false positives to the antivirus editors, which is a > tedious an manual task. > > If you have any idea as to how this can be improved, I'd be really > happy to hear it, since this problem has been bugging everyone. I've also had some binaries reported as virus. It was incredibly funny to try to compile something only to have the content of "ocamlopt.exe" disappear; not the file, only the content. IIRC the same often happens with GCC. I don't know how an antivirus heuristic could not trigger on compilers, bytecode interpreters or VMs, bindings to many low-level and possibly uncommon functions, installers that will require admin rights(*) and UPX'ed files. Or the combination of all of these. (*) Windows' UAC will trigger automatically for any executable named "setup.exe" or "install.exe" -- Adrien Nader