Update Windows SmartScreen says infected so does VT / Comodo

Windows specific questions, problems.
Post Reply
8bits1byte

Update Windows SmartScreen says infected so does VT / Comodo

Post by 8bits1byte »

Hello,

I went to update to the latest release (5.4.3) and windows Smart Screen tried to stop it, I gave it the benefit of doubt and clicked 'RUN ANYWAY' - then, Comodo Firewall said it was "not signed and can not be trusted" and wanted to run the installer sandboxed/contained? - so I uploaded the installer to VirusTotal where it got 2 hits - so no digital signature (CA cert?) and some of its code being picked up as Infected by 2 AV's

I uploaded the previous installer and was 100% clean. Think it needs the code looking at.

For now I will be sticking with 5.4.2

regards

OP
Tabmu
Newbie
Newbie
Posts: 6
Joined: Sat Apr 23, 2022 10:21 am

Re: Update Windows SmartScreen says infected so does VT / Comodo

Post by Tabmu »

Exactly which file is being detected as infected and where did you download the file from?

Here are my findings from VirusTotal:
qbittorrent_4.6.0alpha1_lt20_qt6_x64_setup.exe - No detections
https://www.virustotal.com/gui/file/4c7 ... 5bbc21f976

qbittorrent_4.6.0alpha1_lt12_qt6_x64_setup.exe - No detections
https://www.virustotal.com/gui/file/00d ... 4211f25c51

qbittorrent_4.5.3_lt20_qt6_x64_setup.exe - No detections
https://www.virustotal.com/gui/file/192 ... d5b7f6c885

qbittorrent_4.5.3_qt6_x64_setup.exe - No detections
https://www.virustotal.com/gui/file/409 ... aa77bf34ce

qbittorrent_4.5.3_lt20_qt5_x64_setup.exe - 1 detection
https://www.virustotal.com/gui/file/6c7 ... 5369b80977

qbittorrent_4.5.3_x64_setup.exe - 2 detections
https://www.virustotal.com/gui/file/99b ... a55e75a138
Tabmu
Newbie
Newbie
Posts: 6
Joined: Sat Apr 23, 2022 10:21 am

Re: Update Windows SmartScreen says infected so does VT / Comodo

Post by Tabmu »

I've extracted qbittorrent_4.5.3_x64_setup.exe with 7-Zip and used VirusTotal to scan the files individually:
uninst.exe - 2 detections
https://www.virustotal.com/gui/file/cef ... c286058c31

nsisFirewallW.dll - 1 detection
https://www.virustotal.com/gui/file/53b ... 3eeb18d2c2

System.dll - 1 detection
https://www.virustotal.com/gui/file/8dc ... 0b4e7f65a8

As several files come back with a relatively low detection rate, I'm not overly concerned. But it would be reassuring if a developer could comment and fix these issues.
Archivist
Newbie
Newbie
Posts: 18
Joined: Wed Nov 03, 2021 6:42 pm

Re: Update Windows SmartScreen says infected so does VT / Comodo

Post by Archivist »

I downloaded the files. Norton 360 gave me an message about trusting the files.

After I selected to "keep" the files, Norton 360 said the files are "safe" and did not treat them as infected.
User avatar
Peter
Administrator
Administrator
Posts: 2693
Joined: Wed Jul 07, 2010 6:14 pm

Re: Update Windows SmartScreen says infected so does VT / Comodo

Post by Peter »

Please do yourself, guys, a favor and delete these snake oil, scam anti-virus products like right now.

Seriously they do nothing but fearmonger and try to upsell their useless garbage. I can feel their pain. They built a product that was required in the Windows XP era but became obsolete as the years went by. It must truly suck. Especially for the shareholders and CEO. Besides, Norton has been nothing but a scam forever. Comodo too. Comodo literally marks everything as a virus unless they are digitally signed. Like how moronic is that? If you sign the file? It can be the worst malware ever, it will just let it through. Just don't. Please.

Some AV products are "OK" like ESET, but I give it a try now and then and they just cause issues. It's like using the default Defender, getting the same protection, but just also getting a truckload of other annoyances on top. Just please, stick to the default Windows anti-virus. It is good. It's been good since Windows 8 and Windows 10. Seriously, feel free to check out AV tests, Defender is one of the best out there, and it's free, and it's included, and yay.

https://www.av-comparatives.org/consumer/
https://www.av-test.org/en/

Microsoft also pulled a silly one a few versions ago when it started removing torrent clients. But they quickly fixed that and it was a one-time thing throughout all these years.

Tabmu: You can see that no reputable AV vendor marks the installer or files.
Post Reply