Jump to content
Ultimaker Community of 3D Printing Experts

Cura 2.3.1 flagged by Virustotal


Fast6er
 Share

Recommended Posts

Posted · Cura 2.3.1 flagged by Virustotal

Hi team-

My new workplace has very stringent software security policies, including thorough inspection of software that hasn't previously been vetted.

One of the steps is a Virustotal scan, and Cura 2.3.1 threw 4 flags. FWIW, 2.3.0 threw 2 flags.

As such, I have no recourse to install the software on my corporate computer, which is a real downer.

Is there anything that can be done to address these (assuming) false positives, or, (worst case) malicious code?

Thanks in advance for any help or insight.

  • Link to post
    Share on other sites

    Posted · Cura 2.3.1 flagged by Virustotal

    If you knew who my employer was, you may revise your opinion :)

    Here's the report:

    linky

    As I mentioned, this is one metric of several they use, and these results make them wary. The responsibility lies on either me or Ultimaker to prove that Cura is safe to install and run. My experience is purely anecdotal across several machines and versions, and that's not worth much to them. Their suggestion was that I ask for Ultimaker's input.

  • Link to post
    Share on other sites

    Posted · Cura 2.3.1 flagged by Virustotal

    I find it a little odd that the file being analyzed is a win64 program, yet the Virustotal scan categorizes it as a win32 / 386 processor executible.

    Are they sure they analyzed the right file or are their catagories that far out of date?

  • Link to post
    Share on other sites

    Posted · Cura 2.3.1 flagged by Virustotal

    "Generic Trojan" -> there is fairly little we can do about this. We tried getting Cura listed on the whitelist of some of the virus scanner companies, but it's a lot of work getting it done with every single one of them.

    We suspect that it's the combination of Cura being able to send statistics (if you agree) and it using a local (socket) connection with the backend.

    What would it take to prove that it's safe? Show them the source code? That we can do! ;)

    • Like 2
    Link to post
    Share on other sites

    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now
     Share

    • Our picks

      • New here? Get ahead with a free onboarding course
        Hi,
         
        Often getting started is the most difficult part of any process. A good start sets you up for success and saves you time and energy that could be spent elsewhere. That is why we have a onboarding course ready for
        Ultimaker S5 Pro Bundle, Ultimaker S5, Ultimaker S3 Ultimaker 2+ Connect.   
        They're ready for you on the Ultimaker Academy platform. All you need to do to gain access is to register your product to gain free access. 
        Ready? Register your product here in just 60 seconds.
          • Like
        • 11 replies
    ×
    ×
    • Create New...