Avira reporting BugReporter.exe as trojan

[LaughingJohn]

Hi,

I presume this is a false positive, but since installing version 14.2.1 Avira (Antivirus Pro 15.0.29.32, definition file 8.14.23.204) has been reporting C:\Program Files (x86)\Caphyon\Advanced Installer 14.2.1\bin\x86\BugReporter.exe as a trojan ( TR/Crypt.XPACK.Gen2).

Just thought I'd mention it in case you weren't aware.

Regards,
LJ

[Sorin]

Hello LaughingJohn,

This is indeed a false positive detection. No other anti-virus software has detected our file, as you can see here : VirusTotal BugReporter.exe

Also, the x64 version of the file isn't detected by any of the anti virus software :
BugReporter.exe x64

We will require Avira to whitelist this file. Until them, please add an exception for this file.

Best regards,
Sorin

[LaughingJohn]

Thank you!

[Sorin]

Hello,

You are welcome! Please let me know if you have any other questions.

Best regards,
Sorin

[avsemenov]

Dr.Web detect Trojan.MulDrop7.40579
in advanced installer 14.2.1/stubs/x86/externalui.exe and advanced installer 14.2.1/bin/osprovision.exe

[Sorin]

Hello,

I can assure you that these are false positive detection. We have requested Dr.Web to whitelist these files. Until they will update their database you can safely ignore these detections.

Best regards,
Sorin

[Gonnagle]

F-secure has also been lately deleting "osprovision.exe" as "Gen:Variant.Ursu.13868"

[Daniel]

Hello and welcome to our forums,

Thank you for bringing this to our attention.

We tested and replicated the detection too. I can assure you this is a false positive detection. We already submitted a false positive report and hopefully the file will be whitelisted soon.

All the best,
Daniel

[Gonnagle]

Hi,

With 14.7 F-Secure is again removing osprovision.exe as Virus (Gen:Variant:Ursu.136289).

ai_fsecure_deletes_osprovisionexe.png (10.65 KiB) Viewed 7000 times

BR,

Gonnagle

[Daniel]

Hello Gonnagle,

Thank you for your heads up again. I can assure you this is a false positive detection.

We will contact the F-Secure team and hopefully they will get this whitelisted soon.

All the best,
Daniel