Page 1 of 1

False positive: MALWARE!!!

Posted: 2017-03-09 15:16
by xparrot1976
I downloaded Filezilla last night 3/8/17 and when I went to unzip it, my virus protection, VirusBarrier, popped up that the zip contained malware "OS X/Spigot". So I did not install it. This was downloaded here https://filezilla-project.org/download.php?type=client

Re: False positive: MALWARE!!!

Posted: 2017-03-10 08:11
by botg
It's a false-positive, there is no malware in the file. You're using one of those cheap virus scanners that flag entire installer technologies, without actually checking what the installer does.


It's like making pen and paper illegal just because someone might write something undesirable with it.

Re: False positive: MALWARE!!!

Posted: 2017-03-22 07:56
by daybo
Same here - although with BitDefender.

I could accept the false positive, but the sha 512 doesn't match, which makes me doubly suspicious.

Re: False positive: MALWARE!!!

Posted: 2017-03-22 13:30
by boco
The SHA512 is for the offer-free packages found on

https://filezilla-project.org/download.php?show_all=1

Re: False positive: MALWARE!!!

Posted: 2017-03-22 18:39
by botg
Note the different filename stated inside the .sha512 file.

Re: False positive: MALWARE!!!

Posted: 2017-04-16 11:14
by scottydelta
This is definitely a malware/adware. How do you justify the removal of Ublock Origin from Firefox by FileZilla installation?

I wish FileZilla dint dive so low in order to make some money!

Re: False positive: MALWARE!!!

Posted: 2017-04-16 19:26
by botg
It definitely shouldn't do that. What is your operating system?

Re: False positive: MALWARE!!!

Posted: 2017-05-10 20:30
by Ekam
I have the same issue.
Intego Virus Barrier 10.9.10 (definitions up to date)
OSX 10.12.4

Re: False positive: MALWARE!!!

Posted: 2017-05-11 06:58
by botg
False-positive. It's an installer that does what it says on the screen, after the user confirms it.

Flagging it as malware is like making kitchen knives illegal because one could stab people with it.

Re: False positive: MALWARE!!!

Posted: 2017-07-10 14:59
by blake52
Avast generated the same "false" positive when I downloaded and tried to install the Mac version from the default download button on the filezilla page. on July 8,2017. I eventually got an uncontaminated version from one of the secondary links in tarball format. So it seems that this problem is ongoing and not just from disreputable sites.

Re: False positive: MALWARE!!!

Posted: 2017-07-10 15:04
by blake52
OS X/Spigot...