Page 1 of 1
installer reporting viurs with Symantec and totalvirus.
Posted: 2019-10-31 17:33
by ampm
Downloaded the installer from filezilla-project.org and Symantec states there are two separate virus. Scanned the download URL using Virustotal.com and it also reports malicious software. Can I get a clean installer or is this not possible with filezilla any longer? I knew from reading posts that the installer was full of unwanted app installs but never thought it would have virus.
**EDIT**
Downloaded the zip file and there doesnt seem to be anything in that.
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2019-11-04 07:23
by botg
It's a false-positive, there are no viruses in our installers. Report it to your AV vendor.
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2019-12-24 10:42
by georgeg
I tested the latest installer "FileZilla_3.46.3_win64-setup" on 2 computers, one running MalwareBytes and the other one running Eset NOD32.
MalwareBytes is reporting this dll pbkocbduubae.dll as an Adware.
On the other computer once I click the "Agree" button during setup, the installer tries to connect to
http://cloud.nitehe-nutete.com/ and the antivirus blocks it.
Is this executable bundled with any third party software?
I did not have this issue with the ZIPPED version, I scanned it with both antivirus nothing was detected.
Thank you
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2019-12-26 04:07
by boco
The installer name you mentioned does not have any adware in it. Only the installers ending with "-sponsored" or "-bundled" include third-party offers.
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2019-12-31 09:19
by georgeg
Can you provide a link to download the clean installer please? Because I have downloaded this from FileZilla website.
Thank you
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2020-01-01 03:13
by boco
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2020-01-03 12:04
by pwjone1
I wonder if this is related. Technically, I have FileZilla Pro (from Apple Mac App Store), and Carbon Black flagged some installers:
Carbon Black.
Threats Blocked
InstallCore is known malware and was blocked 12/10/19
/private/var/folders/zx/y02hj1156t170p7_lkgw729h0000gn/t/com.. 3:05 PM
FileZilla_3.41.2_macos-x86_setup_bundled.dmg
InstallCore is known malware and was blocked 12/9/19
/private/var/folders/zx/y02hj1156t170p7_lkgw729h0000gn/t/com.. 5:03 PM
FileZilla_3.41.2_macos-x86_setup_bundled.dmg
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2020-01-03 16:34
by botg
It's a false-positive.
Re: installer reporting viurs with Symantec and totalvirus.
Posted: 2020-01-10 13:00
by ninj
Hi,
I also have NOD32 block this URL: http://cloud.nitehe-nutete.com/ when installing This is probably because it is the sponsored version... It's an issue.