Bug 283930 - Avira antivir reports multiple viruses in win install package
Summary: Avira antivir reports multiple viruses in win install package
Status: RESOLVED FIXED
Alias: None
Product: amarok
Classification: Applications
Component: general (show other bugs)
Version: 2.4.3
Platform: Microsoft Windows Microsoft Windows
: NOR normal
Target Milestone: 2.5
Assignee: Amarok Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-13 16:52 UTC by Emanuele Santoro
Modified: 2011-10-31 20:44 UTC (History)
5 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
a screenshoot of my antivirus report (172.74 KB, image/png)
2011-10-13 16:52 UTC, Emanuele Santoro
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Emanuele Santoro 2011-10-13 16:52:28 UTC
Created attachment 64486 [details]
a screenshoot of my antivirus report

Version:           2.4.3
OS:                MS Windows

I installed Amarok 2.4.3-3 from standalone package installer on my laptop (Win7 professional - 32 bit).

My antivirus - Avira Antivir Personal reported many times of viruses within the install package.

Reproducible: Didn't try

Steps to Reproduce:
Install amarok from win32 binaries:

* (optional) install an antivirus if you don't have one
* (optional) update your antivirus unless you didn't recently
* go to: http://amarok.kde.org/wiki/Download:Windows
* download latest version: http://amarok.kde.org/downloads/windows/amarok-setup-2.4.3-3.exe

* run it
* worry if you don't get any warnings

Actual Results:  
i got an unfunctional amarok installation

Expected Results:  
no warnings from my active antivirus
Comment 1 Myriam Schweingruber 2011-10-13 20:14:29 UTC
And which exact viruses did your application detect? Or did it just give multiple warnings? Without a concrete indication it is probably simply a warning for an unknown application, nothing concrete so probably not much to worry about.
Comment 2 Hannah von Reth 2011-10-13 22:11:53 UTC
Microsoft Security Essentials\Microsoft Forefront and Symantec Norton didn't report anything, I scanned the whole installation, so I guess it's a false positive.

But we should try to contact Avira or something like that, such warnings will only frighten our users.
Comment 3 Emanuele Santoro 2011-10-14 12:01:43 UTC
Look at the attachment.
Comment 4 Andre Heinecke 2011-10-14 12:20:11 UTC
Hi, we had this reported before:
https://bugs.kde.org/show_bug.cgi?id=281582
This is really annoying and confusing to users. Use http://www.clamwin.com/ < it's Free Software ;)

I did a quick search and found: http://forum.avira.com/wbb/index.php?page=Thread&threadID=131204 which explains how and where to send avira a false positive.
Could someone please send the affected binaries to them? I don't have them at hand and don't know exactly which versions are affected. It should not take more then 10 minutes if you have the binaries at hand.
Comment 5 Hannah von Reth 2011-10-14 13:15:30 UTC
I have contacted them and I'm waitng for a response
Comment 6 Ralf Habacker 2011-10-31 15:43:57 UTC
Yesterday Patrick told me about getting no answer and I resubmitted the binary. Today I got a response from avira, that it should not be identifed as malware anymore. 

Then i installed avira on a fresh computer, downloaded the kdewin package and got no positive false more.
Comment 8 Ralf Habacker 2011-10-31 20:44:39 UTC
(In reply to comment #7)
> great now symantec reports it as virus
> http://www.virustotal.com/file-scan/report.html?id=b606fef7175e5fcb361a98390088f4f9532e0f12631e4964ccd52d1321597a9d-1320083138

here is the related positive form - https://submit.symantec.com/false_positive/
They expect to get infos about the product from which this problem is reported.