X2Go Bug report logs - #1444
Firefox flags latest windows client download as virus or malware

Toggle useless messages

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Chris Duffy <cadeon924@gmail.com>

To: submit@bugs.x2go.org

Subject: Firefox flags latest windows client download as virus or malware

Date: Mon, 2 Mar 2020 18:03:34 -0500

[Message part 1 (text/plain, inline)]

Package: x2goclient, windows
Version: 4.1.2.2, maybe others

Firefox flags x2goclient-4.1.2.2-2020.02.13-setup.exe as a virus. No
further information is provided.

I found links to a folder with earlier versions from this page:
https://wiki.x2go.org/doku.php/doc:installation:x2goclient

x2goclient-4.1.2.0-2018.06.22-setup.exe was not flagged, indicating that
the issue is in more recent builds.

Workaround: Downloaded and installing the older version from here:
https://code.x2go.org/releases/binary-win32/x2goclient/releases/4.1.2.0-2018.06.22/


[image: Capture.PNG]

[Message part 2 (text/html, inline)]

[Capture.PNG (image/png, inline)]

Message #10 received at 1444@bugs.x2go.org (full text, mbox, reply):

From: Stefan Baur <X2Go-ML-1@baur-itcs.de>

To: 1444@bugs.x2go.org, cadeon924@gmail.com

Subject: False Alert

Date: Tue, 31 Mar 2020 14:49:45 +0200

[Message part 1 (text/plain, inline)]

Control: close -1
Control: tag -1 not-a-bug

Closing this bug as it is a known false alert.  Whenever these
"smartscreen" filters (Chrome and Internet Explorer have them as well)
detect a Windows executable that isn't digitally signed (and our
detached GPG signatures don't count in that regard), and that hasn't
seen a large number of downloads, it will automatically flag it as
malicious.

If enough users report this to Mozilla/Google/Microsoft as a false
alert, a human will review the file and whitelist it.
Possibly this also happens over time, with a rising number of downloads
and/or the detection rates at virustotal.com not rising even after
several weeks.

I've just attempted a test download using the latest Firefox on a
Windows 10 machine, no such warning was issued any more.

-Stefan

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.