Windows installer antivirus warnings

dinkypumpkin dinkypumpkin at gmail.com
Mon Nov 3 07:49:12 PST 2014


Avast and Kaspersky are known to reject get_iplayer installers, going 
back several versions. There has now been a report that Zone Alarm 
doesn't like it either. To my knowledge, no other desktop antivirus 
package does so, but that may just be because they haven't been 
reported. If any other desktop antivirus software is rejecting the 
installer, sound off so I'll know.

The installer was scanned with current (at the time) ESET, Norton, Trend 
Micro, Malwarebytes and MS Security Essentials, with no warnings.  That 
makes me think that Avast and Kaspersky are flagging false positives, 
but users of those products would need to send the installers to the 
vendor to be checked.

The installer was also uploaded to virustotal.com before release.  Every 
installer version, including the current one, has picked up detections 
over time on virustotal.com.  To be honest, I don't know if that means 
more false positives or more legitimate detections from updated 
scanners.  I've never been able to duplicate those detections on the 
desktop using the kit listed above.

In the past, there also have been problems reported with anti-spyware 
packages like Spybot.  Since the get_iplayer installer both downloads 
and unpacks other applications and runs an external EXE (perl) that 
downloads files, that isn't too surprising.  You have to use your 
judgement there.

If you don't want to bypass your antivirus to install get_iplayer, you 
can always install it manually:

https://github.com/dinkypumpkin/get_iplayer/wiki/winmanual

Someone with with better tools or more knowledge on this subject should 
weigh in.  If the installer is in fact infected, I'll withdraw it.



More information about the get_iplayer mailing list