VirusTotal flags installer as malware

[nickalh]

nickalh last edited by

Hello all,
I'm not sure if this belongs here, in feature requests or elsewhere. I just downloaded the opera installer. VirusTotal flags it as malware. VirusTotal is known to have false positives, but 3 false positives is pretty high.

https://www.virustotal.com/gui/file/e0fe2414bab0b2d84c980d9686ffb0e1b6f68e285051a51d2b6f7e7efeae9569/detection

This seems about the only relevant link, I could find but that probably got fixed 5+ years ago.

I'm running windows 11, downloaded and scanned using Firefox 119.0

[burnout426]

burnout426 Volunteer last edited by

Antiy-AVL detected Trojan/Win32.Possiblethreat
Bkav Pro detected W32.AIDetectMalware
TrendMicro-HouseCall detected TROJ_GEN.R002V01K523
Trapmine detected Malicious.moderate.ml.score

Heuristic detection. They're guessing based on behavior and machine learning etc. Probably flagged the Opera installer because it's the net installer that fetches Opera's program files from Opera's servers. They probably wouldn't have a problem with Opera's offline package that includes the program files.

Opera's installer is also compressed with UPX to make it smaller. Some engines consider this malicious even when it's not.

Those detections all look like false positives to me.