Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Win.Virus.Zard-10023240-0 within Firefox Setup .msi

william.swartz
william.swartz
more options

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?
Ama-screenshot ananyekiwe

All Replies (3)

James
James
  • Top 25 Contributor
  • Moderator
more options

ClamAV has been one of the few scanners that has had false positives with Firefox for Windows downloads over the years.

I uploaded the Firefox Setup 115.9.1esr.msi to Virustotal site and it says 0/57 with ClamAV saying undetected also.

https://www.virustotal.com/gui/file/8a96aa95afa32ccc7ee4d86f23f4d47152a0e6f1a841b17abb8f06c1526532ab/detection

Okulungisiwe ngu James

Helpful?

zeroknight
zeroknight
more options

Upload the files to *virustotal.com* to confirm they haven't been altered.

Helpful?

william.swartz
william.swartz Umnikazi wombuzo
more options

Thanks for the replies, I appreciate them. VT was the first thing I did, my question is more "what is (or what is the purpose of) Win.Virus.Zard-10023240-0"

Helpful?

Buza umbuzo

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.