Author Topic: Avast Reports "Amonia" infection with FileZilla download  (Read 1784 times)

0 Members and 1 Guest are viewing this topic.

Offline avast1310

  • Newbie
  • *
  • Posts: 5
Avast Reports "Amonia" infection with FileZilla download
« on: July 17, 2019, 02:45:36 PM »
After FileZilla decided to go subscription, I tried to install the free version.

Yet, Avast says there's an infection in the current version of the download ("Amonia") and won't install it. The company claims there is no problem.

Is this another false positive or what?

Not sure how to resolve.

Thanks,

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #1 on: July 17, 2019, 08:27:37 PM »
Quote
Is this another false positive or what?
Impossible to answer from the info given

What message does avast give?   post screenshot


Quote
Not sure how to resolve.
Test file at virustotal and report file to avast lab






Offline avast1310

  • Newbie
  • *
  • Posts: 5
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #2 on: July 17, 2019, 09:12:26 PM »
Quote
Is this another false positive or what?
Impossible to answer from the info given

What message does avast give?   post screenshot


Quote
Not sure how to resolve.
Test file at virustotal and report file to avast lab


Offline avast1310

  • Newbie
  • *
  • Posts: 5
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #3 on: July 17, 2019, 09:20:00 PM »
Here's the virustotal page 1.

Note that this is the standard DMG download for FileZilla at https://filezilla-project.org/download.php

One of the other virustotal pages references "ammonia" also.

What's up with this download?

Thanks

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #4 on: July 17, 2019, 10:05:20 PM »
better to post link to scan result
https://www.virustotal.com/gui/file/530c9d5682f888e5d0d9a3f63b1299f03ba17ba21bbeb7cb962dcfafc27878ae/detection

seems it is detected as PUP = Possible Unwanted Program
InstallCore is a potentially unwanted application that installs other potentially unwanted applications onto the computer.

installCore >> https://en.wikipedia.org/wiki/InstallCore


File name may tell something >> FileZilla_3.43.0_macosx-x86_sponsored-setup.dmg  ?



If you think it is wrong you may report it to avast lab

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438



« Last Edit: July 17, 2019, 10:10:38 PM by Pondus »

Offline avast1310

  • Newbie
  • *
  • Posts: 5
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #5 on: July 17, 2019, 11:01:12 PM »
Thanks much for your great replies and info.

I noticed that "sponsored" portion of the file name also.

Strange thing is that if I go directly to the download site and download just the FZ program itself (in an archive file), but no installer, then all seems OK. A manual Avast scan finds no problems. Yet, on the same site, clicking the green download button (on the FZ site) downloads that version that seems to be infected with whatever.

Thanks again! :)

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #6 on: July 17, 2019, 11:17:51 PM »
Quote
downloads that version that seems to be infected with whatever.
Not infected but bundled with extra crapware


There is also the version of opt out installers, if you dont see it and remove the tic you may install something you dont want

avast and CCleaner have done it (piriform is owned by avast)
https://support.piriform.com/hc/en-us/articles/360001205071-Why-has-Avast-been-installed-to-my-machine-

https://blog.avast.com/welcome-piriform-to-avast


« Last Edit: July 17, 2019, 11:22:04 PM by Pondus »

Offline avast1310

  • Newbie
  • *
  • Posts: 5
Re: Avast Reports "Amonia" infection with FileZilla download
« Reply #7 on: July 17, 2019, 11:39:58 PM »
Sounds good.

Now that FileZilla Pro has gone, sadly, the "Forced Subscription" route (after I already "paid" for the program in good faith), I'll stick to the free version that doesn't trigger any avast alerts (the separate download with no installer, just the program in a compressed file).

Thanks.