Malware in companion

[Pascal H.]

Hello,

Intego Virus barrier does not let me install downloadhelper, telling it contains a malware.

Any idea ?

Thanks

PascalH

[mig]

What exact file from the companion does this AV report the problem with ?

Can you check this link https://support.intego.com/hc/en-us/articles/207114738-VirusBarrier-False-Positive- and submit the file as False Positive as described in the article ?

[Cortig]

I've had the same issue today with the Mac version of the Helper app.

I looked around on the Web and found references of another antivirus software was also flagging the extension as an "unwanted" program (though I can't seem to remember which one it was now…).

Corentin

[Pascal H.]

Hello,

Yesterday, I asked the people from VirusBarrier (intego) about the problem.

Finally they told me it was a false positive, and that the file was okay. (They are going to publish an update soon of their viruses definitions).

[mig]

I also submitted the false positive form to Symantec (this has been required for every new release of the coapp for Windows). By experience, this should be cleared today or tomorrow.

I made the same action to BitDefender and Avira but didn't get a response yet.

There was a time where AV programs were looking for virus signature in binaries. Now it looks like every binary is seen as suspicious until its signature is whitelisted. This makes having a living product with regular updates much harder.

[Cortig]

Today's malware definition for Virus Barrier corrected the problem and the app is no longer flagged as a malware :-)

Corentin

[mig]

Thanks for the feedback.

[PK]

Unfortunately not. VirusBarrier detected a malware. The real question is WHY ? Thanks.  

[mig]

Are you sure your AV database is up to date ?

[PK]

Yes, I am.

[mig]

Then you may want to report the issue to VirusBarrier (intego). On July 23rd, they wrote:

Cher client Intego,

Tout d'abord, nous tenons à vous présenter toutes nos excuses, ainsi qu'au développeur de l'extension "Video DownloadHelper" :
nous sommes allés trop vite en besogne.
Après un ré-examem plus approfondi de l'application compagnon, il s'avère qu'il s'agit bien d'un faux-positif.

Des définitions virales corrigées seront disponibles demain dans l'après-midi.

Veuillez nous excuser pour la gêne occasionnée.

The coapp code hasn't changed since then.