Improved Search panel:


Copy from Worksheet to Document:


Automated plug-ins update after new SMath Studio installation:

I'm getting a virus issue when I save an exe in the full version.



The file seems to work fine on the computer I created it on, but when I send it to another PC, windows defender blocks it and detects the trojan Win32/AgentTesla!ml.
Not sure how to handle this. I can't distribute exe files like this.

*when I send it in a zipped folder via email.

Wrote

I can't distribute exe files like this.

Any *.exe is prone to virus, though many are reputed safe.
IrfanView, WinGrab, WASP, ColorPick, Calipers ...
The MathSoft Collaboratory did reject any *.exe attachment.

Wrote

The file seems to work fine on the computer I created it on, but when I send it to another PC, windows defender blocks it and detects the trojan Win32/AgentTesla!ml.
Not sure how to handle this. I can't distribute exe files like this.

False positive. Anti-virus software sometimes do not like when programs creates other programs. You have to contact to your anti-virus vendor or exclude such programs from scanning.

Unfortunately I can do nothing with it.

Just an update. I transferred the file with a flash drive instead of email and there is no issue at all. No virus detected, no unknown program warning, as it had worked in the past.
I was using the native windows zip feature, maybe that had something to do with it?

Thanks for the quick feedback Andrey.

Alright, did some more testing and no matter how I send the file (removed extension, fake extension, zipped, file share download) windows is still detecting a virus.

How are we supposed to share our exe files if they get blocked as viruses? I don't remember this being an issue before as I've sent several of my exe files before without issues.

Wrote

Alright, did some more testing and no matter how I send the file (removed extension, fake extension, zipped, file share download) windows is still detecting a virus.

How are we supposed to share our exe files if they get blocked as viruses? I don't remember this being an issue before as I've sent several of my exe files before without issues.

I'm using Windows 10 and cannot reproduce this issue. Are you sure your PC has no viruses which could break exe files generated by SMath Studio?

I'm running win10 as well. No viruses. Try to zip an exe and sent it to another computer running windows. Remember, this is not a problem for the computer where I made the exe, only when I share it.

By the way, the exact same exe file copied to to the other computer using a USB drive has no issues at all. Only having issues when the exe comes off of email or is downloaded.

Wrote

I'm using Windows 10 and cannot reproduce this issue. Are you sure your PC has no viruses which could break exe files generated by SMath Studio?

Probably he has one that machine doesn't aware of.
In my old job my pc has one too and all SMath Viewer files I produced with them had trojans.
At the same time that was not an issue with my home pc wtih same SMath version and files.
This issue has been corrected after a format.

Regards

AgentTesla is a quite specific Trojan, usually in the cases of false positive triggered by suspicious behavior the issue is labeled with something like "generic.win32". The detection is based on euristic algorithms thus not so straightforward and just speculation, but the fact that is prompted by a popular antivurus but not noticed by anyone (AFAIK) might indicate a system infection rather than a program issue.

Hi. First, do you scan the file with others AV? You can do that online without installing anything at several sites. For instance you can try at

https://online.drweb.com/

https://opentip.kaspersky.com/

Windows defender isn't a robust AV.

On the other hand, the SMath viewer files store the plugins necessary for their execution within the exe file. That is, if any of the extension files used by the .sm file that you "compile" has a virus, or a false positive report, it will only give that positive with the plugins you use in that particular file, which may be very difficult to reproduce that positive.

Best regards.
Alvaro.

Did a scan on the kaspersky site and the exe file is clean.

Wrote

On the other hand, the SMath viewer files store the plugins necessary for their execution within the exe file. That is, if any of the extension files used by the .sm file that you "compile" has a virus, or a false positive report, it will only give that positive with the plugins you use in that particular file, which may be very difficult to reproduce that positive.

All plug-ins are compiled on the dedicated build machine (setup for SMath project exclusively) which has no Internet access and has installed Kasperski Anti-virus. In addition all files downloaded using HTTPS which guarantees compiled files are identical to what you received on your machine.
So what you've described is almost impossible situation.

Wrote

Wrote

On the other hand, the SMath viewer files store the plugins necessary for their execution within the exe file. That is, if any of the extension files used by the .sm file that you "compile" has a virus, or a false positive report, it will only give that positive with the plugins you use in that particular file, which may be very difficult to reproduce that positive.

All plug-ins are compiled on the dedicated build machine (setup for SMath project exclusively) which has no Internet access and has installed Kasperski Anti-virus. In addition all files downloaded using HTTPS which guarantees compiled files are identical to what you received on your machine.
So what you've described is almost impossible situation.

Hi Andrey. I'm explain very bad. Let me try to say the same with an example.

This file calculate a numerical value of an integral, but evaluated symbolically, only with SMath int(x^2,x,0,a) function. It's size is 2 793 bytes

SMathViewerWithOutMaple.zip (602 KiB) downloaded 56 time(s).



This other do the same, but with the maple plugin as maple(int(x^2,x,0,a)), and it's size is now 14 489 088 bytes.

SMathViewerWithMaple.zip (13 MiB) downloaded 58 time(s).



What I mean with "compile" it's that for this second file all the files for maple are stored in the exe file, for example gif.dll, mkernel.dll, cmaple.exe. Those maple files are very old, and are good candidates for false positives. It could be hard to determine for which plugin an AV like windows defender goes to return false positives if you don't know which plugin is stored in the exe SMath Viewer.

Hope now I explain better.

Best regards.
Alvaro.

Problems with copy and paste in document mode

I confirm what is indicated by Denis, even in my installation

sergio

Wrote

Problems with copy and paste in document mode

Yeah, it is a known issue - copy/paste of content inside Text Region is not implemented yet (except simple text). I plan to handle it soon.
Thank you!

Wrote

Did a scan on the kaspersky site and the exe file is clean.

I have some good news regarding false positive detection! After a long night and morning I've found binary pattern which triggers some AVs to mark executables created by Viewer as malicious...
Knowing it I've added possibility to give AVs a fight! Unfortunately I have to disable compression of internal resources to do it, but I do not think it is so bad.
Please try a new SMath Studio version - it has the following checkbox (uncheck -> file size increased -> AVs are happy -> profit):


Here are results of testing the output result in VirusTotal:

Before

https://www.virustotal.com/gui/file/d1f299de59b684327e24cd600950e5339f7e2ebf3e65b0dc7fa71f82f384cb44/detection

After

https://www.virustotal.com/gui/file/d0e5782c2ea4793b426d9d39aed13e87d174dcda8bb2adb4823953893f835389/detection

Best regards.

Just to mention: in my case file size without compression is 1.35MB (against to 0.6MB with compression). But using 7-Zip afterwards allows to make a size less than 0.5MB, which is good enough for delivering to other people.

Please confirm issue with copy/paste of exe files fixed now.