ESET reports Firefox Unbranded Installer as containing a trojan

RESOLVED WORKSFORME

Status

RESOLVED WORKSFORME
a year ago
a year ago

People

(Reporter: eros_uk, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

a year ago
User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Build ID: 20170623154118

Steps to reproduce:

ESET Smart Security reports and cleans firefox-54.*.en-US.win32-add-on-devel.installer as having "Win32/Spy.Ursnif.BH trojan"
Component: Security → Release Automation
Product: Core → Release Engineering
QA Contact: catlee
Version: 54 Branch → ---
bugs 1181116, 1247732 are other recent false positive reports.
(Reporter)

Comment 3

a year ago
It is a false positive since I had already downloaded and installed those versions before. It has recently been added to ESET detection list.

The versions that I have on HD are FF54.0 b2 & b6
firefox-54.0.en-US.win32-add-on-devel.installer.exe
refreshing the scan adds one additional identification:
https://www.virustotal.com/en/file/030a0db380d884b05b384621145ea4b1a2119cee13bf4135e04fe0d34adde039/analysis/1500556899/

 Malware.Heuristic!ET#82% (cloud:EgKJNdohKwU)
ESET on virustotal now reports that this file is safe.
Status: UNCONFIRMED → RESOLVED
Last Resolved: a year ago
Resolution: --- → WORKSFORME
(Reporter)

Comment 6

a year ago
> ESET on virustotal now reports that this file is safe.
I updated the virus database an hour ago and it is still marking them as unsafe.
Virus signature database version 15798 (20170724)
You need to log in before you can comment on or make changes to this bug.