Cannot update from 4.0.8 to 4.0.9

Hi,

I am trying to upgrade my existing free installation (4.0.8) to 4.0.9 and the company's antivirus is triggered, because it detects a Trojan Dropper.

I tried to get it whitelisted by the IT department, but apparently the detection is legit.

Am I the only one with this issue? Is there anything you can do to prevent that from happening, so I can safely upgrade?

Thanks

Product: ProGet
Version: 4.0.9

If the installer is signed by Inedo, you can be assured it's a false positive.

Please see and share KB#1113 Anti-malware False Positives, Code Signing, and Safety of Inedo Products with your IT department.

Also, please report this as a false positive to your malware vendor.

Sorry, I posted the reply in another question by mistake. You probably saw it already, but I'll copy it here for the sake of completeness:

Thanks for the fast reply.

Why don't you let Microsoft know? It should be quite important for you, since it prevents you from reaching even paid customers. It's also better for you to contact them, since you can provide parts of the source code if they ask for it.

Here is the link: https://www.microsoft.com/en-us/security/portal/submission/submit.aspx

We are using System Center Endpoint Protection.

Thanks again.

Thanks Christian; actually, we have submitted several times to this, unfortunately they're not very fast on responding :(

It's also possible your definitions our out of date; they did a major whitelisting a month or so ago, but we've heard reports of the same exact installer (and all previous ones) being flagged false positive again.

Thanks for the info. I understand.
I'll attempt an update of the definitions, but I think they're pretty recent.

Do you know if this only happens on upgrade? Or does it happen on clean installs too? Because I know that I managed to clean install 4.0.8 without issue.

It's completely arbitrary.

Sometimes a different installer (small one) is flagged, sometimes all versions of every installer we've ever published are flagged, sometimes it works if you directly download it from amazon s3 instead of our CNAME url.

That's really not cool for you guys. I hope Microsoft gets it fixed asap.

I managed to get IT to whitelist (or update definitions, not sure which they did). But now, when I run the installer, it doesn't detect that it's an upgrade. It tries to do a clean install. Is there a reason for this? Any way I can force it to upgrade?

Thanks!

Nevermind, apparently, the installation was messed up because of the failed previous upgrades (due to the antivirus). The program was not registered anymore so the installer didn't detect it for upgrade. I simply installed over the previous installation and it worked!

Now running on 4.0.9!

Thanks a lot for the info and help!