View original (French)

Virus in FileZilla

Solved
balnelius10 Posted messages 7 Status Member -  
fabul Posted messages 42132 Registration date   Status Moderator Last intervention   -

Hello,

I tried to download FileZilla, but Windows Defender indicates the presence of a PUA in the installation file. Is FileZilla infected by malware?

Best regards


3 answers

  1.
    bazfile Posted messages 58492 Registration date   Status Moderator Last intervention   20 268
     

    Hello.

    PUA stands for potentially unwanted applications.

    It should be noted that Windows Defender often alerts for everything and nothing.

    Filezilla probably comes with additional software that installs if you do not uncheck the boxes during installation, nothing too serious as long as you downloaded the software from the official site.

    For your information.

    When installing free software, it's important to read the different screens carefully; you need to uncheck the boxes presented, they are not always visible at first glance, and if you do not uncheck them, additional software may install that's the business model of a lot of free software.

    Example:

     .

    bazfile
    Moderator/Security Contributor.
    a hello, a response, a thank you are always appreciated.

    1
    1. fabul Posted messages 42132 Registration date   Status Moderator Last intervention   6 061
       

      Hello,

      I tried the Filezilla client in virtual mode, and it didn't offer anything else during installation.

      Some are overzealous (Some antivirus)

      @+

      1
  2. fabul Posted messages 42132 Registration date   Status Moderator Last intervention   6 061
     

    Hello,

    Could you analyze it on VirusTotal?

    If you downloaded it from the official site, it’s probably a false positive.

    It’s the price to pay for having antivirus...

    0
  3. balnelius10 Posted messages 7 Status Member
     

    I downloaded it from the official site

    for virus total I got this

    0
    1. fabul Posted messages 42132 Registration date   Status Moderator Last intervention   6 061
       

      Download the file by bypassing Defender, and analyze it from your PC.

      As for the official "Client" file, I received this.

      https://www.virustotal.com/gui/file/76491df69a26019139ac11117cd21bf5d0257a5ebd3d67837f558c8c9c3483d8/detection/f-76491df69a26019139ac11117cd21bf5d0257a5ebd3d67837f558c8c9c3483d8-1725374257

      In the Details tab, we can read (with a green checkmark)

      Signature verification
      Signed file, valid signature

      This is an indication that it's not a virus.

      (Even if good files are not often digitally signed, they made the effort to do so specifically to create fewer issues with antivirus software and to recognize the authenticity of the file.)

      0
      1. balnelius10 Posted messages 7 Status Member > fabul Posted messages 42132 Registration date   Status Moderator Last intervention  
         

        I analyzed it with AVG, it didn't detect anything, but the 3 red things are strange, aren't they?

        0
      2. fabul Posted messages 42132 Registration date   Status Moderator Last intervention   6 061 > balnelius10 Posted messages 7 Status Member
         

        I wouldn't worry too much about these detections.

        Some want to detect as much as possible, even if it means throwing the baby out with the bathwater.

        And Filezilla is a collateral victim.

        1
      3. balnelius10 Posted messages 7 Status Member > fabul Posted messages 42132 Registration date   Status Moderator Last intervention  
         

        ok, thanks for the answers

        0
      4. fabul Posted messages 42132 Registration date   Status Moderator Last intervention   6 061 > balnelius10 Posted messages 7 Status Member
         

        You're welcome,

        @+

        1