BitDefender does not allow installation of V13.5 just downloaded

Get help for specific problems
Posts: 2
Joined: 6 May 2024

MagicianAtLarge

BitDefender is saying that FreeFileSync_13.5_Windows_Setup.exe is creating and attempting to execute an unsigned executable in $user\AppData\Temp\<random_string> and not allowing the install. Is here something wrong with the current version that is on the site after the week of no access due to invalid certificate on the website or is BitDefender just being too aggressive?

The version that i downloaded is signed by Florian BAUER, zenju [at] freefilesync.org, on ‎Monday, ‎April ‎1, ‎2024 8:09:54 AM
Posts: 2
Joined: 7 May 2024

student598

Same problem here, uninstalled until it's solved.

Also, getting pop-up warnings from the uninstaller, check:
virustotal[.]com/gui/file/de07af8475d40023f5d54a8d9c72764537afb3db83c6228ac002a8b624b61e30/
User avatar
Site Admin
Posts: 7061
Joined: 9 Dec 2007

Zenju

Most likely it's bothered by the fact that InnoSetup calls itself via an executable disguised as a tmp file in order to delay elevation. The AV signature is only a "Generic": https://freefilesync.org/faq.php#virus
User avatar
Posts: 3647
Joined: 11 Jun 2019

xCSxXenon

Same problem here, uninstalled until it's solved.

Also, getting pop-up warnings from the uninstaller, check:
virustotal[.]com/gui/file/de07af8475d40023f5d54a8d9c72764537afb3db83c6228ac002a8b624b61e30/ student598, 07 May 2024, 22:21
If you waited for something with 0 detections, you'd never install anything ever. Especially open source stuff or things that update frequently without being massively popular.
Just use Microsoft's AV and all problems go away from overly-aggressive 3rd-party AVs. Most "hacks" and compromised systems are generally entirely caused by the user and no security offering would help anyway. I can only speak to my >6 years in professional tech support though, so take it as valuable as you want, I have literally never seen an 'aftermarket' antivirus do anything but cause problems
Posts: 2
Joined: 7 May 2024

student598

Thanks for the replies, I totally get it's a false positive, and I'll definitely think about switching antivirus. I took the time to send a ticket to Bitdefender to help stop it from flagging it as a virus, but seems like it's a common thing with updates.
Posts: 2
Joined: 6 May 2024

MagicianAtLarge

Actually, it looks like the installer drops an unsigned executable installer in the appsdir temp area and tries to execute it. Not only is it a detection, I cannot even even white list it as it creates a random directory to drop the file in.
User avatar
Site Admin
Posts: 7061
Joined: 9 Dec 2007

Zenju

Actually, it looks like the installer drops an unsigned executable installer in the appsdir temp area and tries to execute it. MagicianAtLarge, 09 May 2024, 00:43
This executable, e.g. C:\Users\Zenju\AppData\Local\Temp\is-6B40T.tmp is properly signed.

Other than that there's little one can do about this procedure. These are the shenanigans that "Inno Setup" came up with, unfortunately.