installer reporting viurs with Symantec and totalvirus.

Come here to discuss FileZilla and FTP in general

Moderator: Project members

Post Reply
Message
Author
ampm
500 Command not understood
Posts: 1
Joined: 2019-10-31 17:28
First name: james
Last name: ampm

installer reporting viurs with Symantec and totalvirus.

#1 Post by ampm » 2019-10-31 17:33

Downloaded the installer from filezilla-project.org and Symantec states there are two separate virus. Scanned the download URL using Virustotal.com and it also reports malicious software. Can I get a clean installer or is this not possible with filezilla any longer? I knew from reading posts that the installer was full of unwanted app installs but never thought it would have virus.

**EDIT**

Downloaded the zip file and there doesnt seem to be anything in that.

User avatar
botg
Site Admin
Posts: 32558
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: installer reporting viurs with Symantec and totalvirus.

#2 Post by botg » 2019-11-04 07:23

It's a false-positive, there are no viruses in our installers. Report it to your AV vendor.

georgeg
500 Command not understood
Posts: 2
Joined: 2019-12-24 10:07
First name: George

Re: installer reporting viurs with Symantec and totalvirus.

#3 Post by georgeg » 2019-12-24 10:42

I tested the latest installer "FileZilla_3.46.3_win64-setup" on 2 computers, one running MalwareBytes and the other one running Eset NOD32.
MalwareBytes is reporting this dll pbkocbduubae.dll as an Adware.
On the other computer once I click the "Agree" button during setup, the installer tries to connect to http://cloud.nitehe-nutete.com/ and the antivirus blocks it.
Is this executable bundled with any third party software?
I did not have this issue with the ZIPPED version, I scanned it with both antivirus nothing was detected.

Thank you

User avatar
boco
Contributor
Posts: 24881
Joined: 2006-05-01 03:28
Location: Germany

Re: installer reporting viurs with Symantec and totalvirus.

#4 Post by boco » 2019-12-26 04:07

The installer name you mentioned does not have any adware in it. Only the installers ending with "-sponsored" or "-bundled" include third-party offers.
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

georgeg
500 Command not understood
Posts: 2
Joined: 2019-12-24 10:07
First name: George

Re: installer reporting viurs with Symantec and totalvirus.

#5 Post by georgeg » 2019-12-31 09:19

Can you provide a link to download the clean installer please? Because I have downloaded this from FileZilla website.

Thank you

User avatar
boco
Contributor
Posts: 24881
Joined: 2006-05-01 03:28
Location: Germany

Re: installer reporting viurs with Symantec and totalvirus.

#6 Post by boco » 2020-01-01 03:13

### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

pwjone1
500 Command not understood
Posts: 1
Joined: 2020-01-03 11:55
First name: Paul
Last name: Jones

Re: installer reporting viurs with Symantec and totalvirus.

#7 Post by pwjone1 » 2020-01-03 12:04

I wonder if this is related. Technically, I have FileZilla Pro (from Apple Mac App Store), and Carbon Black flagged some installers:

Carbon Black.

Threats Blocked


InstallCore is known malware and was blocked 12/10/19
/private/var/folders/zx/y02hj1156t170p7_lkgw729h0000gn/t/com.. 3:05 PM
FileZilla_3.41.2_macos-x86_setup_bundled.dmg

InstallCore is known malware and was blocked 12/9/19
/private/var/folders/zx/y02hj1156t170p7_lkgw729h0000gn/t/com.. 5:03 PM
FileZilla_3.41.2_macos-x86_setup_bundled.dmg

User avatar
botg
Site Admin
Posts: 32558
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: installer reporting viurs with Symantec and totalvirus.

#8 Post by botg » 2020-01-03 16:34

It's a false-positive.

ninj
500 Command not understood
Posts: 1
Joined: 2020-01-10 12:57

Re: installer reporting viurs with Symantec and totalvirus.

#9 Post by ninj » 2020-01-10 13:00

Hi,

I also have NOD32 block this URL: http://cloud.nitehe-nutete.com/ when installing This is probably because it is the sponsored version... It's an issue.

Post Reply