False positive: MALWARE!!!

Come here to discuss FileZilla and FTP in general

Moderator: Project members

Post Reply
Message
Author
xparrot1976
500 Command not understood
Posts: 1
Joined: 2017-03-09 05:21
First name: W. Kirk
Last name: Lutz

False positive: MALWARE!!!

#1 Post by xparrot1976 » 2017-03-09 15:16

I downloaded Filezilla last night 3/8/17 and when I went to unzip it, my virus protection, VirusBarrier, popped up that the zip contained malware "OS X/Spigot". So I did not install it. This was downloaded here https://filezilla-project.org/download.php?type=client

User avatar
botg
Site Admin
Posts: 33171
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: False positive: MALWARE!!!

#2 Post by botg » 2017-03-10 08:11

It's a false-positive, there is no malware in the file. You're using one of those cheap virus scanners that flag entire installer technologies, without actually checking what the installer does.


It's like making pen and paper illegal just because someone might write something undesirable with it.

daybo
500 Command not understood
Posts: 1
Joined: 2017-03-22 07:52
First name: David
Last name: Craig

Re: False positive: MALWARE!!!

#3 Post by daybo » 2017-03-22 07:56

Same here - although with BitDefender.

I could accept the false positive, but the sha 512 doesn't match, which makes me doubly suspicious.

User avatar
boco
Contributor
Posts: 25279
Joined: 2006-05-01 03:28
Location: Germany

Re: False positive: MALWARE!!!

#4 Post by boco » 2017-03-22 13:30

The SHA512 is for the offer-free packages found on

https://filezilla-project.org/download.php?show_all=1
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
### END SIGNATURE BLOCK ###

User avatar
botg
Site Admin
Posts: 33171
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: False positive: MALWARE!!!

#5 Post by botg » 2017-03-22 18:39

Note the different filename stated inside the .sha512 file.

scottydelta
500 Command not understood
Posts: 1
Joined: 2017-04-16 11:11
First name: Scotty
Last name: Delta

Re: False positive: MALWARE!!!

#6 Post by scottydelta » 2017-04-16 11:14

This is definitely a malware/adware. How do you justify the removal of Ublock Origin from Firefox by FileZilla installation?

I wish FileZilla dint dive so low in order to make some money!

User avatar
botg
Site Admin
Posts: 33171
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: False positive: MALWARE!!!

#7 Post by botg » 2017-04-16 19:26

It definitely shouldn't do that. What is your operating system?

Ekam
500 Command not understood
Posts: 1
Joined: 2017-05-10 20:26

Re: False positive: MALWARE!!!

#8 Post by Ekam » 2017-05-10 20:30

I have the same issue.
Intego Virus Barrier 10.9.10 (definitions up to date)
OSX 10.12.4
Attachments
Screen Shot 2017-05-10 at 15.30.00.jpg
Screen Shot 2017-05-10 at 15.30.00.jpg (22.1 KiB) Viewed 11610 times

User avatar
botg
Site Admin
Posts: 33171
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: False positive: MALWARE!!!

#9 Post by botg » 2017-05-11 06:58

False-positive. It's an installer that does what it says on the screen, after the user confirms it.

Flagging it as malware is like making kitchen knives illegal because one could stab people with it.

blake52
500 Command not understood
Posts: 2
Joined: 2017-07-09 23:46
First name: Blake
Last name: Learmonth

Re: False positive: MALWARE!!!

#10 Post by blake52 » 2017-07-10 14:59

Avast generated the same "false" positive when I downloaded and tried to install the Mac version from the default download button on the filezilla page. on July 8,2017. I eventually got an uncontaminated version from one of the secondary links in tarball format. So it seems that this problem is ongoing and not just from disreputable sites.

blake52
500 Command not understood
Posts: 2
Joined: 2017-07-09 23:46
First name: Blake
Last name: Learmonth

Re: False positive: MALWARE!!!

#11 Post by blake52 » 2017-07-10 15:04

OS X/Spigot...

Post Reply