jon

If an answer was given 2 years ago, could you please provide a link to it? I searched before asking but didn't find it.

Been using 7-zip since year 2000, and this week is the first time I've had a problem. I provide materials to volunteer workers of a non-profit org, in 7z files on my website. Two days ago one of them reported his download was blocked by Defender. I use Linux, so opened Win11 in a VM, and got the same problem. The 7z files are definitely clean; Defender's detection is false. It's also erratic, sometimes blocking a file, sometimes allowing the same file. The detection seems to be done by AI/ML, not...

Is it possible to hide a "virus" in the structure of a 7z file, even though all the files contained in it are clean? If someone did that, when that 7z file is opened by a clean 7z.exe, could that "virus" be executed? (That would be a vulnerability in 7z that needs to be patched.) The reason for the question is; Microsoft Defender Antivirus is blocking download of many clean 7z files because it is getting a false positive detection of Wacatac.B!ml and others. This simplest fix for this problem is:...

There are similar reports from as long as 2 years ago; see this one on reddit.

Been using 7-zip since 1998, and this week is the first time I've had a problem. I provide materials to volunteer workers of a non-profit org, in 7z files on my website. Two days ago one of them reported his download was blocked by Defender. I use Linux, so opened Win11 in a VM, and got the same problem. The 7z files are definitely clean; Defender's detection is false. It's also erratic, sometimes blocking a file, sometimes allowing the same file. The detection seems to be done by AI/ML, not based...

Windows and Linux do not have entirely the same kinds of metadata, but the modification time and read-only flag seem to transfer OK.

Been using 7-zip since 1998, and this week is the first time I've had a problem. I provide materials to volunteer workers of a non-profit org, in 7z files on my website. Two days ago one of them reported his download was blocked by Defender. I use Linux, so opened Win11 in a VM, and got the same problem. The 7z files are definitely clean; Defender's detection is false. It's also erratic, sometimes blocking a file, sometimes allowing the same file. The detection seems to be done by AI/ML, not based...

This is a long shot, as I've never looked at this code before. In the attached file I've written comments at lines 722 and 738 (search for "# XXX"). I have no idea how to do what I've suggested there, but it looks like it might be the right place to do it. I was playing with rst2html5, and found it easier to look around in its few files rather than in the whole docutils installation. I'm in Australia, so I won't be around for the next 10 hours or so.