Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Wo archive tread sia. Meɖekuku bia biabia yeye ne ehia kpeɖeŋu.

Win.Virus.Zard-10023240-0 within Firefox Setup .msi

  • 3 ŋuɖoɖowo
  • 0 masɔmasɔ sia le wosi
  • 1 view
  • Nuɖoɖo mlɔetɔ william.swartz

william.swartz
william.swartz
more options

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?
Screen ƒe photowo kpe ɖe eŋu

All Replies (3)

James
James
  • Top 25 Contributor
  • Moderator
more options

ClamAV has been one of the few scanners that has had false positives with Firefox for Windows downloads over the years.

I uploaded the Firefox Setup 115.9.1esr.msi to Virustotal site and it says 0/57 with ClamAV saying undetected also.

https://www.virustotal.com/gui/file/8a96aa95afa32ccc7ee4d86f23f4d47152a0e6f1a841b17abb8f06c1526532ab/detection

James trɔe

zeroknight
zeroknight
more options

Upload the files to *virustotal.com* to confirm they haven't been altered.

william.swartz
william.swartz Biabia la
more options

Thanks for the replies, I appreciate them. VT was the first thing I did, my question is more "what is (or what is the purpose of) Win.Virus.Zard-10023240-0"