Opera being detected as C2/Generic-A virus

[tlo234]

tlo234 last edited by leocg

Opera is getting detected by Sophos Anti Virus Program as C2/Generic-A malware. Why would this be happening all of the sudden?

[leocg]

leocg Moderator Volunteer @tlo234 last edited by

@tlo234 You need to ask Sophos.

[andrew84]

andrew84 @tlo234 last edited by

@tlo234 Where exactly it detects the threat?
I had some weird alert from Kaspersky on Windows recently (19.03).
The threat was found in 'installer.exe' in 'opera autoupdate' folder and in Opera Beta latest installer.

[tlo234]

tlo234 @andrew84 last edited by

@andrew84
For me, it detected at '/Applications/Opera.app/Contents/Frameworks/Opera Framework.framework/Versions/67.0.3575.79/Helpers/Opera Helper.app/Contents/MacOS/Opera Helper

[leonsky999]

leonsky999 last edited by

Yes, this is happening to me also.
Has Opera figured this out yet. It seems to be embedded in their software.

[sgunhouse]

sgunhouse Moderator Volunteer last edited by

Look at the identification. They are not identifying Opera as an actual virus, but as a type of suspicious program. Usually this is because of the background updater - to them, a program that makes changes to the computer without user interaction is dangerous, esprcially when you don't know what it is installing. As long as it is installing only appropriately-signed updates it is fine - well, if you can trust the signer. If some hacker managed to steal the signing keys, they could wreck your system.