GnuCash
Contact   Instructions
Bug 794967 - Windows Defender reports Trojan Virus Win32/Azden.B!cl in gnucash-3.0.setup.exe
Summary: Windows Defender reports Trojan Virus Win32/Azden.B!cl in gnucash-3.0.setup.exe
Status: RESOLVED NOTGNUCASH
Alias: None
Product: GnuCash
Classification: Unclassified
Component: Windows (show other bugs)
Version: 3.0
Hardware: Other Windows
: Low minor
Target Milestone: future
Assignee: windows
QA Contact: windows
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-04-04 03:29 EDT by power
Modified: 2018-06-07 17:25 EDT (History)
7 users (show)

See Also:


Attachments
Screenshots (51.46 KB, image/png)
2018-04-04 03:29 EDT, power
no flags Details

Description power 2018-04-04 03:29:17 EDT
Created attachment 370517 [details]
Screenshots

Windows Defender detects Trojan:Win32/Azden.B!cl in gnucash-3.0.setup.exe.

Please consider the attached screenshots.

OS Name:                   Microsoft Windows 10 Pro, 64bit
OS Version:                10.0.16299 N/A Build 16299
Hotfix(s):                 10 Hotfix(s) Installed.
                           [01]: KB4053577
                           [02]: KB4054022
                           [03]: KB4056887
                           [04]: KB4057247
                           [05]: KB4058702
                           [06]: KB4074595
                           [07]: KB4087256
                           [08]: KB4088785
                           [09]: KB4090914
                           [10]: KB4088776
Comment 1 André Klapper 2018-04-04 08:28:32 EDT
Please provide a URL where you downloaded gnucash-3.0.setup.exe
Comment 2 power 2018-04-04 08:51:43 EDT
(In reply to André Klapper from comment #1)
> Please provide a URL where you downloaded gnucash-3.0.setup.exe

Download URL:
https://sourceforge.net/projects/gnucash/files/
-> then click on button "Download Latest Version"

This leads to:
https://sourceforge.net/projects/gnucash/files/latest/download?source=files

This leads to:
https://netix.dl.sourceforge.net/project/gnucash/gnucash%20%28stable%29/3.0/gnucash-3.0.setup.exe

I have just downloaded the file once again, still same behavior...

Thanks for your great work!
Comment 3 Frank H. Ellenberger 2018-04-04 09:28:42 EDT
Thank you for the report, but this is a "false positive" result of Windows Defender.

See e.g. https://www.virustotal.com/#/url/862271c3d2b8221ce7c887ffa719682f7049956dbec5b40735d0876e98c90a39/detection for more comprehensive results.

For former reports see the thread starting with
https://lists.gnucash.org/pipermail/gnucash-user/2018-April/075888.html

Microsoft's false-positive reporting facility number 82655139-6978-4eeb-80c2-7e1e72f820a6

Related: https://lists.gnucash.org/pipermail/gnucash-user/2018-April/075978.html - Gnucash 3.0 Microsoft Security Essentials Threat Detected
> Is there a way for the developers to have this file correctly
categorized/assessed by MSE?

So I will keep this open for the results of the register process, but reduce the importance.
Comment 4 Frank H. Ellenberger 2018-04-04 09:30:32 EDT
... and adjust the title.
Comment 5 John Ralls 2018-06-07 17:25:11 EDT
We never heard anything back from Microsoft about the false positive report, but we also had no reports of similar problems with Gnucash 3.1.

Note You need to log in before you can comment on or make changes to this bug.