530582 - F-Prot 6.0.9.3 false positive for Thunderbird 2.0.0.23 . Thunderbird Setup 2.0.0.23.exe

Status: RESOLVED INCOMPLETE

(Thunderbird :: Installer, defect)

Description

[Roland Tanglao needinfo please :rolandtanglao, :mohnkuchen, :adobo, :sinigang, :roland]

2 reports of Thunderbird 2.0.0.23 en-US version being flagged by F-Prot as having a virus

Reports are fully detailed here:
http://getsatisfaction.com/mozilla_messaging/topics/f_prot_6_0_9_3_reports_a_virus_in_thunderbird_2_0_0_23?topic_tools=open

Summary:

Report 2:
FPROT 6.0.9.3
> I have detected a virus "Win32/Downldr2.HUGJ " in the copy of Thunderbird that is attached to the download button on the page "http://www.mozillamessaging.com/en-US/thunderbird/"
>
> The detection was made using Frisk FPROT 6.0.9.3 with the virus signature file 20/11/2009

Report 1:

F-Prot 6.0.9.3, The scanning Engine Version number is 4.5.1 and the Virus signature file is from 11/23/2009 3:50AM. 

-from log file when downloading today--
Found file, C:\Documents and Settings\gwbacon\Local Settings\Temporary Internet Files\Content.IE5\4MDHBRED\Thunderbird%20Setup%202.0.0.23[1].exe, infected with W32/Heuristic-CO3!Eldorado
For more information please visit http://www.f-prot.com/support/index.html
------
--from log file when downloading Friday--
Found file, C:\Documents and Settings\gwbacon\Local Settings\Temporary Internet Files\Content.IE5\8LMFKXUZ\Thunderbird%20Setup%202.0.0.23[1].exe, infected with W32/Downldr2.HUGJ
For more information please visit http://www.f-prot.com/support/index.html

Comment 1

[Roland Tanglao needinfo please :rolandtanglao, :mohnkuchen, :adobo, :sinigang, :roland]

for what it's worth http://www.virustotal.com/analisis/8a02dcccc99def6088ddd0176b6347fca48a9f3468fe581a33c0002abf2ffc30-1259000719

using definitions from 11/23 shows no positive for f-prot

Comment 2

[Carsten Book [:Tomcat]]

Attachment: virus total result

also no virus result today - it would be helpful to know from what mirror this file was served.