Arduino icon indicating copy to clipboard operation
Arduino copied to clipboard

Trojan:Win32/PackBackdoor ?

Open mm108 opened this issue 3 years ago • 6 comments

I was trying to install Arduino IDE 1.8.19 and as always I ran the installer through VirusTotal. One of the Security Vendor's Analysis detects Trojan:Win32/PackBackdoor.0142b83b:

https://www.virustotal.com/gui/file/9b480a781e823f81c643a67b1a0e53ad25fceb1b2a4a90977df6916877262055

Arduino_IDE_1 8 19

I am thinking that this could mostly be a false alarm? Any thoughts?

mm108 avatar Aug 22 '22 15:08 mm108

Uttam

uttam2000 avatar Aug 22 '22 16:08 uttam2000

Hi @mm108. Thanks for bringing this detection to our attention. I have notified Arduino's security team of your report.

per1234 avatar Aug 22 '22 17:08 per1234

Hi @mm108. Thanks for bringing this detection to our attention. I have notified Arduino's security team of your report.

Thank you so much @per1234.

mm108 avatar Aug 23 '22 02:08 mm108

When only one of the engines, especially a lesser-known one detects it, it is probably a false positive,

tofilwiktor avatar Oct 20 '22 09:10 tofilwiktor

Hey guys, any new about this? was a false positive finally??

jguiherdev avatar Feb 03 '23 10:02 jguiherdev

Hi @jguiherdev @per1234, After internal analysis, the security team concluded it was a false positive. We have contacted the vendor with a "false positive report" request, we hope the virustotal's engine will be updated quickly.

rhpco avatar Feb 03 '23 11:02 rhpco