1427099 - Windows Defender Flags Seamonkey W32 2.49.1 download for Fuerboos Trojan

Status: RESOLVED INVALID

(SeaMonkey :: Installer, defect)

Description

[R O]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.1
Build ID: 20171015235623

Steps to reproduce:

Tried to download SM 2.49.1 for Win32 on Windows 10 64-bit system with latest Windows Defender updates as of  12-26-2017, and it blocked the download exe file due to it having fuerboos.C!cl trojan.


Actual results:

Download aborted by Windows Defender


Expected results:

Download completion

Comment 1

[R O]

Could this be a false positive?  I did just install ClamAV on a Linux system, and downloaded and scanned the SM 2.49.1 Win32 exe file with it, and it marked the file as "clean". Would ClamAV catch such a malware taint?

Comment 2

[Rainer Bielefeld]

(In reply to R O from comment #1)
> Could this be a false positive?  

Yes! But you did not tell from where you got your SeaMonkey installer ...
You can upload a file at <https://www.microsoft.com/en-us/wdsi/filesubmission>, and I doubt that they will confirm the virus suspect of your local Defender.

Please feel free to reopen this one if you can contribute comprehensible indication that a SM installer form original source is contaminated with malware.

Comment 3

[R O]

I tried the download from this URL:
https://www.seamonkey-project.org/releases/