Recent incident with Archicad connector installations

Hey Community,

We want to alert you to a recent incident that may have affected users who tried to install our Archicad connectors - either legacy (v2) or next-gen (v3)

We discovered on Tuesday that windows defender started to quarantine one of the files that we build and bundle with the our Archicad connector installers; RegisterArchicadAddOn.exe.

You can view the Virus Total report of the affected file here.

As soon as we were made aware, we temporarily removed the affected Archicad addons from our public websites while we investigated…

We have determined there is no threat present, no viruses or anything bad. Simply, we forgot to add our code signing signatures to the file,
which, coupled with the PyInstaller tool we are using to create said executable, made the file look rather suspicious to several antivirus tools, leading to the false positive detection :sweat_smile:.


Yesterday, we released an updated version of the file, which is now contains the correct signatures. For good measure, we’ve also re-written it to avoid using PyInstaller, which appears to have frequent false positives like the one we observed.

For all users who encountered issues installing the Archicad connector over the past few days, please try again with the latest version, you should find windows defender is no longer suspicious of any files in this new version.

In future, we’ll be more diligent in ensuring our code signatures are applied to all files we bundle, to prevent this from happening again.


Any questions feel free to ask.

2 Likes