# \[False positive\] VirusTotal Alerts SynfigStudio-1.4.5.exe

**URL:** <https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074>\
**Category:** Support\
**Tags:** false-positive, virustotal\
**Created:** [May 22, 2024, 1:14pm UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074 "2024-05-22T13:14:53Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![RebelBuho](https://forums.synfig.org/user_avatar/forums.synfig.org/rebelbuho/32/7880_2.png) [@RebelBuho](https://forums.synfig.org/u/RebelBuho)\
**Post date:** [May 22, 2024, 1:14pm UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/1 "2024-05-22T13:14:53Z")

</div>

Hello everyone.  
 ![NoVirus1](https://forums.synfig.org/uploads/default/original/2X/7/7030a818f99f31c1f27a4a986d1a6e026d7a40b1.jpeg)  
I recently downloaded SynfigStudio-1.4.5.exe from Gumroad and Github, The file from both sites throws me some alerts on total virus.

 ![image](https://forums.synfig.org/uploads/default/original/2X/8/83c7add8878780a92a8603894c49dd7b0fbb068c.png)

2/ 65  
Fortinet  
W32/PossibleThreat  
Ikarus  
Trojan.Shelma

> **[VirusTotal](https://www.virustotal.com/gui/file/90f450cc5ee4180070ea0362a2c072907e5762872df131c550474369134a1fb9/detection)**
>
> VirusTotal

---

<div class="post-metadata">

**Author:** ![BobSynfig](https://forums.synfig.org/user_avatar/forums.synfig.org/bobsynfig/32/175_2.png) [@BobSynfig](https://forums.synfig.org/u/BobSynfig)\
**Post date:** [May 22, 2024, 1:22pm UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/2 "2024-05-22T13:22:07Z")

</div>

Same as here, please read the previous topics before to publish here.  
I received this as potential spam in moderation queue, I allowed it to avoid any doubt.

> [@\[False positive\] Malware in the installer](https://forums.synfig.org/t/false-positive-malware-in-the-installer/15061):
>
> Título: Posible Malware Detected in the Synfig Studio Installer Descripción: Hi Synfig team I wanted to inform that when i wanted to download the last version of Synfig Studio from the official page, my antivirus software detected a troyan malware, i checked it with a webpage named virus total and said it too Operative System: Windows How did I installed it: 1 I entrered the official page [https://www.synfig.org/](https://www.synfig.org/) 2. I clicked the download stable version button 3. I downloaded the installe…

As a reminder, Synfig is free and open-source, as well as its build system.  
You can inspect everything and compile it yourself.

2 out of 65 alerts doesn’t mean anything but that the 2 specific AV engines aren’t discriminant enough

---

<div class="post-metadata">

**Author:** ![smokeytiger](https://forums.synfig.org/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@smokeytiger](https://forums.synfig.org/u/smokeytiger)\
**Post date:** [June 24, 2024, 11:09pm UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/3 "2024-06-24T23:09:14Z")

</div>

Strange thing it went from two viruses to four. It has doubled. Not sure if that can truly be considered safe to use any longer.

 ![false](https://forums.synfig.org/uploads/default/original/2X/7/7c72d0dfa4c4f7dfb6e7f0c67be3d9aaef1f4dc9.png)

---

<div class="post-metadata">

**Author:** ![BobSynfig](https://forums.synfig.org/user_avatar/forums.synfig.org/bobsynfig/32/175_2.png) [@BobSynfig](https://forums.synfig.org/u/BobSynfig)\
**Post date:** [June 25, 2024, 8:04am UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/4 "2024-06-25T08:04:40Z")

</div>

> [@smokeytiger](#):
>
> Strange thing it went from two viruses to four. It has doubled. Not sure if that can truly be considered safe to use any longer.

“Not sure if that can truly be considered safe” to trust some random unknown outsider antiviruses while the major commercial ones don’t detect anything.  
Unless you receive an alert from something more serious like Kaspersky, BitDefender or Norton, don’t believe software that wouldn’t detect an EICAR pattern.

Synfig is open-source, as is its toolchain and all the recipes to build it …  
I invite you to inspect the source code and build it yourself.

---

<div class="post-metadata">

**Author:** ![smokeytiger](https://forums.synfig.org/letter_avatar_proxy/v4/letter/s/f1d935/32.png) [@smokeytiger](https://forums.synfig.org/u/smokeytiger)\
**Post date:** [June 27, 2024, 9:05am UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/5 "2024-06-27T09:05:53Z")

</div>

True True.

Ty for the reply.

---

<div class="post-metadata">

**Author:** ![BobSynfig](https://forums.synfig.org/user_avatar/forums.synfig.org/bobsynfig/32/175_2.png) [@BobSynfig](https://forums.synfig.org/u/BobSynfig)\
**Post date:** [May 5, 2025, 9:38am UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/6 "2025-05-05T09:38:53Z")

</div>

See this for more details and explanations :

> <https://github.com/synfig/synfig/issues/3521#issuecomment-2731432318>
>
> Hi! I am interested in getting into animating, and your software looked great! H…owever I had a problem with a virus total scan. I checked out a previous github posts on a similar topic and by now I am fairly convinced they are false positives. However I'm not 100% sure and just wanted to see if you could get this fixed.
> 
> Sorry to bother you.
> 
> https://www.virustotal.com/gui/file/90f450cc5ee4180070ea0362a2c072907e5762872df131c550474369134a1fb9/community
> 
> Oh, I forgot to mention I downloaded anonymously so it should be the latest version and official.

---

<div class="post-metadata">

**Author:** ![BobSynfig](https://forums.synfig.org/user_avatar/forums.synfig.org/bobsynfig/32/175_2.png) [@BobSynfig](https://forums.synfig.org/u/BobSynfig)\
**Post date:** [May 5, 2025, 9:39am UTC](https://forums.synfig.org/t/false-positive-virustotal-alerts-synfigstudio-1-4-5-exe/15074/7 "2025-05-05T09:39:26Z")

</div>

Closed on May 5, 2025, 9:39am UTC


