We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Thread ini telah diarkib. Sila tanya soalan baru jika anda perlu bantuan.

Win.Virus.Zard-10023240-0 within Firefox Setup .msi

william.swartz
william.swartz
more options

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?
Lampirkan skrinsyot

All Replies (3)

James
James
  • Moderator
  • Top 10 Contributor
more options

ClamAV has been one of the few scanners that has had false positives with Firefox for Windows downloads over the years.

I uploaded the Firefox Setup 115.9.1esr.msi to Virustotal site and it says 0/57 with ClamAV saying undetected also.

https://www.virustotal.com/gui/file/8a96aa95afa32ccc7ee4d86f23f4d47152a0e6f1a841b17abb8f06c1526532ab/detection

Diubah oleh James

zeroknight
zeroknight
more options

Upload the files to *virustotal.com* to confirm they haven't been altered.

william.swartz
william.swartz Pemilik Soalan
more options

Thanks for the replies, I appreciate them. VT was the first thing I did, my question is more "what is (or what is the purpose of) Win.Virus.Zard-10023240-0"