This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Win.Virus.Zard-10023240-0 within Firefox Setup .msi

william.swartz
william.swartz
more options

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?
Attached screenshots

All Replies (3)

James
James
  • Moderator
  • Top 10 Contributor
more options

ClamAV has been one of the few scanners that has had false positives with Firefox for Windows downloads over the years.

I uploaded the Firefox Setup 115.9.1esr.msi to Virustotal site and it says 0/57 with ClamAV saying undetected also.

https://www.virustotal.com/gui/file/8a96aa95afa32ccc7ee4d86f23f4d47152a0e6f1a841b17abb8f06c1526532ab/detection

Modified by James

zeroknight
zeroknight
more options

Upload the files to *virustotal.com* to confirm they haven't been altered.

william.swartz
william.swartz Question owner
more options

Thanks for the replies, I appreciate them. VT was the first thing I did, my question is more "what is (or what is the purpose of) Win.Virus.Zard-10023240-0"