#5991 - Beta2 Quick Installer flagged as malware

By Adam Edington
Added 8th Oct 2024, 2:02 AM
8 views

Identifier	#5991
Issue type	Minor issue (breaks specific functionality)
Title	Beta2 Quick Installer flagged as malware
Status	Closed (cannot reproduce)
Handling member	Deleted
Addon	General / Uncategorised
Description	As described
Steps to reproduce
Funded?	No

The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated

Comments

By Guest posted 8th Oct 2024, 2:02 AM

By Guest posted 8th Oct 2024, 10:34 AM

Can you be more specific? ...does it give any hints as to what piece of the quick installer is malware? Any signatures?

My guess is it's the rootkit detection script. It has several lines of commonly exploited patterns defined which it searches for. Not malware but I can see why something would falsely assume such.

But I do need to know exactly what because it could be something like legitimately poorly written code.

By Guest posted 8th Oct 2024, 2:48 PM

That's all the information it gives me. It's part of my hosting CP, no idea what Malware engine they use.

By Guest posted 9th Oct 2024, 6:30 PM

I used Virus Total to scan against 96 different engines. It found nothing.

https://www.virustotal.com/gui/url/83c50922d561de838170e2d2653a93d44f2b5d68f98ef3eba3f5f9fdfcb31051/detection

I'm closing as a false-positive. If you're able to get more information / a signature, please file a new issue for me.