+- UserSpice (https://userspice.com/forums)
+-- Forum: Support Center (https://userspice.com/forums/forumdisplay.php?fid=23)
+--- Forum: UserSpice 4.3 and Below (https://userspice.com/forums/forumdisplay.php?fid=26)
+--- Thread: Downloads are infected? (/showthread.php?tid=125)
Downloads are infected? - arkroan - 04-15-2016
Hello, I only came across this project today and I wanted to have a look and see how it works.
I have tried to download Userspice ver 4.0f but my avast antivirus reports it as infected with a Trojan.
The same happened when I tried to download it through github.
Could this be a false positive?
Then on second try, the download seems to be unavailable.
I am looking forward to downloading and checking this out. PLease do let me know when it is fixed again.
Downloads are infected? - mudmin - 04-17-2016
I'm not sure what could have happened. One error people get is that the file is "not commonly downloaded" which is crazy considering how many downloads we get. I downloaded userspice 4.0.0f through the website like everyone else would have and uploaded it to virustotal.com They run it through 56 virus scanners and Avast is the only one that comes back with an error, so it's definitely a false positive. I will definitely be contacting avast to see what it is they're having a problem with. Here is a screenshot of my virustotal. Please feel free to do it yourself to confirm...
http://puu.sh/olMTv/e4af6649c3.png
Downloads are infected? - mudmin - 04-17-2016
More specifically, the problem seems to lie in the composer.phar file which is a very common file. I'll keep digging.
Downloads are infected? - mudmin - 04-17-2016
I'm very confused because I uploaded the original Alpha 1 version of UserSpice 4.0.0 and Avast doesn't have a problem with it. Yet it has a problem with the composer.phar file on the latest version. However, when I do a diff of the 2 files, they're absolutely identical.
Downloads are infected? - arkroan - 04-18-2016
Thank you for looking into it.
Avast can be over-jealous some times. It was indeed blocking my download.
In the meantime I went ahead and downloaded the project by disabling Avast and filed a false positive report with them.
Downloads are infected? - raven - 04-18-2016
im running advast internet security mate and it lets it through with no problem you could have something like babloyon toolbar installed thats redirecting your download links to display relevent ads. thers a number of browser hijackers now that do that and yes hijackers make it past advast
Downloads are infected? - mudmin - 04-18-2016
I reported the problem to Avast yesterday and they fixed it. From Avast
Our virus specialists have been working on this problem and it has now been resolved. The provided file isn't detected by Avast anymore. Ticket ID: [#286628]
Thanks for helping me with this.