Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Win.Virus.Zard-10023240-0 within Firefox Setup .msi

william.swartz
william.swartz
more options

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?

ClamAV was triggering on several MSI and EXEs for Firefox Setup versions; 124.0.1.msi, 115.9.1esr.msi, 124.0.1.exe, 115.9.1esr.exe, 115.9.1esr.msi. The flag was on a file Win.Virus.Zard-10023240-0. We believe this is a false positive, but was wondering if you could provide more insight into what Win.Virus.Zard is within the build?
Attached screenshots

All Replies (3)

James
James
  • Top 25 Contributor
  • Moderator
more options

ClamAV has been one of the few scanners that has had false positives with Firefox for Windows downloads over the years.

I uploaded the Firefox Setup 115.9.1esr.msi to Virustotal site and it says 0/57 with ClamAV saying undetected also.

https://www.virustotal.com/gui/file/8a96aa95afa32ccc7ee4d86f23f4d47152a0e6f1a841b17abb8f06c1526532ab/detection

Modified by James

zeroknight
zeroknight
more options

Upload the files to *virustotal.com* to confirm they haven't been altered.

william.swartz
william.swartz Question owner
more options

Thanks for the replies, I appreciate them. VT was the first thing I did, my question is more "what is (or what is the purpose of) Win.Virus.Zard-10023240-0"