BitDefender is saying that FreeFileSync_13.5_Windows_Setup.exe is creating and attempting to execute an unsigned executable in $user\AppData\Temp\<random_string> and not allowing the install. Is here something wrong with the current version that is on the site after the week of no access due to invalid certificate on the website or is BitDefender just being too aggressive?
The version that i downloaded is signed by Florian BAUER, zenju [at] freefilesync.org, on Monday, April 1, 2024 8:09:54 AM
BitDefender does not allow installation of V13.5 just downloaded
- Posts: 2
- Joined: 6 May 2024
- Posts: 2
- Joined: 7 May 2024
Same problem here, uninstalled until it's solved.
Also, getting pop-up warnings from the uninstaller, check:
virustotal[.]com/gui/file/de07af8475d40023f5d54a8d9c72764537afb3db83c6228ac002a8b624b61e30/
Also, getting pop-up warnings from the uninstaller, check:
virustotal[.]com/gui/file/de07af8475d40023f5d54a8d9c72764537afb3db83c6228ac002a8b624b61e30/
- Site Admin
- Posts: 7210
- Joined: 9 Dec 2007
Most likely it's bothered by the fact that InnoSetup calls itself via an executable disguised as a tmp file in order to delay elevation. The AV signature is only a "Generic": https://freefilesync.org/faq.php#virus
- Posts: 4056
- Joined: 11 Jun 2019
If you waited for something with 0 detections, you'd never install anything ever. Especially open source stuff or things that update frequently without being massively popular.Same problem here, uninstalled until it's solved.
Also, getting pop-up warnings from the uninstaller, check:
virustotal[.]com/gui/file/de07af8475d40023f5d54a8d9c72764537afb3db83c6228ac002a8b624b61e30/ student598, 07 May 2024, 22:21
Just use Microsoft's AV and all problems go away from overly-aggressive 3rd-party AVs. Most "hacks" and compromised systems are generally entirely caused by the user and no security offering would help anyway. I can only speak to my >6 years in professional tech support though, so take it as valuable as you want, I have literally never seen an 'aftermarket' antivirus do anything but cause problems
- Posts: 2
- Joined: 7 May 2024
Thanks for the replies, I totally get it's a false positive, and I'll definitely think about switching antivirus. I took the time to send a ticket to Bitdefender to help stop it from flagging it as a virus, but seems like it's a common thing with updates.
- Posts: 2
- Joined: 6 May 2024
Actually, it looks like the installer drops an unsigned executable installer in the appsdir temp area and tries to execute it. Not only is it a detection, I cannot even even white list it as it creates a random directory to drop the file in.
- Site Admin
- Posts: 7210
- Joined: 9 Dec 2007
This executable, e.g. C:\Users\Zenju\AppData\Local\Temp\is-6B40T.tmp is properly signed.Actually, it looks like the installer drops an unsigned executable installer in the appsdir temp area and tries to execute it. MagicianAtLarge, 09 May 2024, 00:43
Other than that there's little one can do about this procedure. These are the shenanigans that "Inno Setup" came up with, unfortunately.