Ferdi: AVG detects the 5.5.0-gm.2 update as a very serious malware

[Gaboris]

I downloaded the update through Ferdi and AVG blocked it through behavior analysis, but also gave the same alert after checking the file itself.

I've submitted the installer to be reviewed so they can flag any false positives themselves, but if others have this same problem you might need to look into what caused this detection.

[kytwb]

Can you please share a screenshot of what you get in AVG?

[kytwb]

We updated Electron to 8.2.3 and implemented screen sharing for MS Teams in 5.5.0-gm.2. Not sure if AVG is somehow detecting something new in the Electron binary or if it's because of the code that is present to share screen in the MS Teams recipe. That's all I can think of for now. Closing as to not affray other people, but happy to continue the discussion 🙏

[kytwb]

I have also submitted 5.5.0-gm.2 Windows binary to VirusTotal, report available here for what it's worth.

[Gaboris]

Hey I'm back. Sorry AVG makes it hard to get exact names now and it just says "FileRepMalware" while on the first launch it had a big fancy popup with an actual malware name, but I think it's not important right now. I'll give it a few days and I'll try again then.

[kytwb]

See also https://github.com/getferdi/ferdi/issues/112 and https://github.com/getferdi/ferdi/issues/635.