Cannot update from 4.0.8 to 4.0.9

Guest

Hi,

I am trying to upgrade my existing free installation (4.0.8) to 4.0.9 and the company's antivirus is triggered, because it detects a Trojan Dropper.

I tried to get it whitelisted by the IT department, but apparently the detection is legit.

Am I the only one with this issue? Is there anything you can do to prevent that from happening, so I can safely upgrade?

Thanks

Product: ProGet
Version: 4.0.9

Guest

If the installer is signed by Inedo, you can be assured it's a false positive.

Please see and share KB#1113 Anti-malware False Positives, Code Signing, and Safety of Inedo Products with your IT department.

Also, please report this as a false positive to your malware vendor.

Guest

Sorry, I posted the reply in another question by mistake. You probably saw it already, but I'll copy it here for the sake of completeness:

Thanks for the fast reply.

Why don't you let Microsoft know? It should be quite important for you, since it prevents you from reaching even paid customers. It's also better for you to contact them, since you can provide parts of the source code if they ask for it.

Here is the link: https://www.microsoft.com/en-us/security/portal/submission/submit.aspx

We are using System Center Endpoint Protection.

Thanks again.

Guest

Thanks Christian; actually, we have submitted several times to this, unfortunately they're not very fast on responding :(

It's also possible your definitions our out of date; they did a major whitelisting a month or so ago, but we've heard reports of the same exact installer (and all previous ones) being flagged false positive again.

Guest

Thanks for the info. I understand.
I'll attempt an update of the definitions, but I think they're pretty recent.

Do you know if this only happens on upgrade? Or does it happen on clean installs too? Because I know that I managed to clean install 4.0.8 without issue.

Guest

It's completely arbitrary.

Sometimes a different installer (small one) is flagged, sometimes all versions of every installer we've ever published are flagged, sometimes it works if you directly download it from amazon s3 instead of our CNAME url.

Guest

That's really not cool for you guys. I hope Microsoft gets it fixed asap.

I managed to get IT to whitelist (or update definitions, not sure which they did). But now, when I run the installer, it doesn't detect that it's an upgrade. It tries to do a clean install. Is there a reason for this? Any way I can force it to upgrade?

Thanks!

Guest

Nevermind, apparently, the installation was messed up because of the failed previous upgrades (due to the antivirus). The program was not registered anymore so the installer didn't detect it for upgrade. I simply installed over the previous installation and it worked!

Now running on 4.0.9!

Thanks a lot for the info and help!