Verify File Integrity

Before proceeding, please verify the SHA-256 hash of the downloaded file. The correct hash should be:

380fac6f918bc199ace29399c44612418917924f9698b70f3744048fe8b73c77

If the hash matches, the antivirus alert is a false positive, as explained below. If it does not match, please download the file again from the official release page on the repository to ensure you have a legitimate copy.

False Positive: Known Issue with PyInstaller

This is a false positive. It is a common issue with executables created by PyInstaller. As seen on VirusTotal, the file is detected as a PyInstaller executable by some antivirus software.

Why This Happens

This is a well-documented issue with PyInstaller executables:

PyInstaller Bundling: The executable contains the Python runtime and libraries packed together, which some antivirus engines flag as suspicious.
Heuristic Detection: Antivirus software uses behavioral analysis that can misidentify legitimate packed executables.
Low Detection Rate: Only 4 out of 70 security vendors flagged this file on VirusTotal, indicating it is likely a false positive.
Known PyInstaller Issue: This is tracked in the official PyInstaller repository, issue #6754.

Verification Steps

You can verify the safety of YTSage by taking the following steps:

Check the source code: All code is open-source and available in this repository.
Build from source: You can build the executable yourself using PyInstaller.
Use pip installation: Install the program via pip install ytsage, which does not trigger antivirus warnings.
Try the FFmpeg-free version: Use the standard .exe version instead of the -ffmpeg.exe version.

Alternative Solutions

Whitelist the application in your antivirus software.
Use the pip installation method instead of the executable.
Build from source for maximum trust and security.

This is a known limitation of executables built with PyInstaller, and the project is completely safe to use. The source code is fully transparent and available for review.

Windows Defender issues a virus warning #33

Description

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions