Kaspersky reports a false positive on 1Password installer [Will notify Kaspersky]
When i tried to download the windows version, my Anti-virus picked this up.
Virus/PUS: "PUS:RiskTool.Win32.Deleter.p" found!
URL: hxxps://cache.agilebits.com/dist/1P/win4/1Password-4.3.1.560.exe
URL: hxxps://d13itkw33a7sus.cloudfront.net/dist/1P/win4/1Password-4.3.1.560.exe
Please kindly advise what's happening?
Cheers,
Dennis
Comments
-
@fierysnake This is most likely a false positive.
0 -
Same here:
The page you've been trying to access was blocked.
Reason: A virus was detected, or the file cannot be scanned by the Anti-virus engine. If a virus was detected, the requested file or page is infected with the virus: not-a-virus:RiskTool.Win32.Deleter.p.
I can't download the file....
This is the URL used: https://d13itkw33a7sus.cloudfront.net/dist/1P/win4/1Password-4.3.1.560.exe
We are using Sophos 10.3 as the virus scanner.
Regards
0 -
@theetron I have downloaded this file...
https://d13itkw33a7sus.cloudfront.net/dist/1P/win4/1Password-4.3.1.560.exe
...and then uploaded it to virustotal.com. 3 out of 53 scanners think this file is infected:
This is most likely a false positive.
0 -
I downloaded the file on a seperate machine from our network to bypass the scanner.
I let the IT department know about this 'false-positive'.Regards
0 -
@theetron: Thanks for reporting this -- both to AgileBits and to your IT department!
I know we run into these issues from time to time, since the virus scanners are just doing pattern matching...and between all of the cybermonkeys on all of their 'digital typewriters' (A.K.A. keyboards) they're bound to hit on a collision now and again. ;)
0 -
You can report a false positive here: http://newvirus.kaspersky.com/
I've informed them about this and hopefully, they'll improve their database soon.
0
