Page 1 of 1

Bundled FileZila Client reported as infected

Posted: 2019-01-08 07:42
by tstribrny
Hello,

I have tried to download FileZila Client 3.39 from your site using Quick Download button.
Which redirected me to download of bundled pack here : https://filezilla-project.org/download.php?type=client .. and offered to save file FileZilla_3.39.0_win64-setup_bundled.exe

But when I choose free version and Chrome popped-up 'Save as' dialog my AV (FortiClient 6.0.4.0182) kicked in and quarantined temporary file and disrupted download.
Reported virus names are Riskware/Funshion and Riskware/Conduit.

When I used Additional Download Options and from https://filezilla-project.org/download.php?show_all=1 chosen to download non-bundled version named FileZilla_3.39.0_win64-setup.exe , then AV warning is not triggered.
Neither during download attempt nor after it when parts are completed. Even additional scan after download haven't found anything suspicious in non-bundled version.
Therefore pure assumption is that 'bundle' is not clear.

Could anyone from FileZila team can have a look into issue and bundle ?

Thank you,
Tomas

Re: Bundled FileZila Client reported as infected

Posted: 2019-01-08 09:08
by botg
It's a false-positive, the offer-enabled installer does not contain any malware.

Re: Bundled FileZila Client reported as infected

Posted: 2019-05-16 16:52
by oncler
It would appear that the file has either been tampered with, or contains sponsored information that a multitude of AV vendors find unsafe. For anyone reading this, upload the file to VirusTotal and check the results. If you need a clean version of the file you can get it on FileZilla's additional downloads page here: https://filezilla-project.org/download.php?show_all=1