Avast Reports "Amonia" infection with FileZilla download

Viruses and worms
1

After FileZilla decided to go subscription, I tried to install the free version.

Yet, Avast says there’s an infection in the current version of the download (“Amonia”) and won’t install it. The company claims there is no problem.

Is this another false positive or what?

Not sure how to resolve.

Thanks,

2
Is this another false positive or what?
Impossible to answer from the info given

What message does avast give? post screenshot

Not sure how to resolve.
Test file at virustotal and report file to avast lab
3
4

Here’s the virustotal page 1.

Note that this is the standard DMG download for FileZilla at https://filezilla-project.org/download.php

One of the other virustotal pages references “ammonia” also.

What’s up with this download?

Thanks

5

better to post link to scan result
https://www.virustotal.com/gui/file/530c9d5682f888e5d0d9a3f63b1299f03ba17ba21bbeb7cb962dcfafc27878ae/detection

seems it is detected as PUP = Possible Unwanted Program
InstallCore is a potentially unwanted application that installs other potentially unwanted applications onto the computer.

installCore >> https://en.wikipedia.org/wiki/InstallCore

File name may tell something >> FileZilla_3.43.0_macosx-x86_sponsored-setup.dmg ?

If you think it is wrong you may report it to avast lab

Report a false positive (select file or website)
https://www.avast.com/false-positive-file-form.php

https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

6

Thanks much for your great replies and info.

I noticed that “sponsored” portion of the file name also.

Strange thing is that if I go directly to the download site and download just the FZ program itself (in an archive file), but no installer, then all seems OK. A manual Avast scan finds no problems. Yet, on the same site, clicking the green download button (on the FZ site) downloads that version that seems to be infected with whatever.

Thanks again! :slight_smile:

7
downloads that version that seems to be infected with whatever.
Not infected but bundled with extra crapware

There is also the version of opt out installers, if you dont see it and remove the tic you may install something you dont want

avast and CCleaner have done it (piriform is owned by avast)
https://support.piriform.com/hc/en-us/articles/360001205071-Why-has-Avast-been-installed-to-my-machine-

https://blog.avast.com/welcome-piriform-to-avast

8

Sounds good.

Now that FileZilla Pro has gone, sadly, the “Forced Subscription” route (after I already “paid” for the program in good faith), I’ll stick to the free version that doesn’t trigger any avast alerts (the separate download with no installer, just the program in a compressed file).

Thanks.