FileRepMalware detected on WinZip 21.0 installer

[REDACTED]

Avast is detecting and blocking the executable installer for WinZip 21.0, file name winzip210.exe, as FileRepMalware. At approximately 140MB, the file is too large to submit to virustotal.com. I've downloaded this file from two different reputable sources with the same result, so I suspect a false positive.

Is anyone else here experiencing the same result with this file?

FWIW, you can download the 64-bit .msi installer file by itself, file name winzip210-64.msi, which scans clean.

[Eddy]

Winzip installer is 711 Kb and the package is 81,03 Mb and not 140 Mb as you say.

[REDACTED]

Nope. The standard .exe installer download for WinZip 21.0 is 142,971 KB and has been approaching that size for several releases: for WinZip 20.0 was 135,262 KB, for WinZip 19.0 it was 117,303 KB, etc.

My guess is the larger size is because the exe installer contains both the 32-bit and the 64-bit versions. The .msi file for the 64-bit version by itself is about half that size, and similar to what you referenced.

[RejZoR]

FileRepMalware is reputation based detection. Is the stub (downloader installer) digitally signed by company that makes WinZip?

[Eddy]

I checked again and the sizes that I mentioned are correct.

RejZoR, yes it is correctly digitally signed.

[REDACTED]

> I checked again and the sizes that I mentioned are correct.


We are evidently talking about two different files. The one I'm referencing is downloaded from the publisher's source at www.winzip.com, and its size is consistent with earlier releases of the same product.

[Eddy]

I downloaded it from there.

[REDACTED]

The file winzip210.exe from http://www.winzip.com/win/en/dprob.htm is 140MB. Are you seeing a different size for that specific file??

[REDACTED]

UPDATE: I downloaded the file again today. It's binary identical to the file I downloaded yesterday, but avast now reports no threats. Speculation: the FileRepMalware alert was probably because this file is a brand new release that had not been widely downloaded yet.

[Pondus]

At approximately 140MB, the file is too large to submit to virustotal.com.

Metadefender.com  take 140MB  file

[REDACTED]

Metadefender.com reports zero threats found on this file.

Turns out avast does not raise the FileRepMalware warning when this file is scanned after being downloaded, only when you try to run it.