Trend Micro is marking cypress.exe for quarantine. Because it's detected as Virus

[Aaltuj]

Current behavior:

Trend Micro is marking cypress.exe for quarantine. It has the message 'Unauthorized File Encryption'. Running a virus scan on cypress.exe prior of running will not detect any issues. After the first run and closing of the application it is moved to quarantine.

Desired behavior:

Running without triggering the virus scanner. At this point in time we can not white-list because we don't know why this is triggered, and therefore not able to use the application .

Steps to reproduce:

1. install cypress with yarn. (also downloaded the zip at http://download.cypress.io/desktop)
2. run node_modules/.bin/cypress open
3. after closing the application it is moved to quarantine.

Versions

version cypress: "cypress": "^3.1.1";
Windows 10

[jennifer-shehane]

I'm honestly not sure how they are qualifying an 'Unauthorized File Encryption'. A search on their site and elsewhere is pretty empty on explanations.

Is there any more information provided from the Trend Micro log?

[lukeapage]

Electron and the squirrel files are frequently mis recognized as a virus, it could be that?

[Aaltuj]

Our system administrator has contacted Trend Micro and this is the response:

Thank you for submitting the sample.

We have analyzed the following file that you submitted and verified this to be non-malicious:

cypress (0e29e588bd3f3a08d66d1a783326372252bf9ff3) - No malicious behavior observed.

This file will be added in our certified safe software databases and may take 12-24 hours to reflect in the systems.

[jennifer-shehane]

@Aaltuj Nice. Thanks for following up. Is cypress running fine now through Trend Micro?