Kaspersky AV reports

#6
by Mzico - opened

Kaspersky Antivirus reports this model as malware, when downloading from text-generation-webui.
chrome_5NxrCdvRlL.png

Not necessarily accusing the author, likely a false positive, but unsure of the steps forward.

The model file in this repo is a safetensors files, which is a format specifically designed to be impossible to infect with malware as they don't contain any code. You can read more about that here: https://blog.eleuther.ai/safetensors-security-audit/

However in your screenshot it looks more like it's something else in your text-generation-webui that it's detecting, rather than this model file? Hard to tell as I can't see all the details in that screenshot, but it's pointing to oobabooga_windows\installer_files\env - the model would go to the models folder, not the env folder. env contains your conda Python environment for text-generation-webui, meaning it contains all the Python packages that text-generation-webui installs in order to make it work.

It's probably still a false positive, but you should check to see what files specifically it claims are infected. There are plenty of Python scripts in text-generation-webui which could theoretically contain malware (though malware in Python scripts is not at all common).

But this model itself cannot be the source.

Thank you for your prompt response.

I have performed the following steps:

  • Downloaded the file using Chrome and scanned it, confirming it as clean.
  • Re-downloaded the file using text-generation-webui, which triggered the malware report once again.
  • Downloaded other models without any issues.

It appears that this issue is specifically related to Kaspersky. I will report this matter to their support team.

Sign up or log in to comment