Skip to main content
 

Trying to download the Opera installer, the file is quarantined by WSA finding a Trojan.Downloader.Gen. Is this due to the included VPN?
Hello

 

Latest Opera installers (for Windows)

Download | 42.0.2393.351 x86

http://get.geo.opera.com/pub/opera/desktop/42.0.2393.351/win/Opera_42.0.2393.351_Setup.exe

Download | 42.0.2393.351 x64

http://get.geo.opera.com/pub/opera/desktop/42.0.2393.351/win/Opera_42.0.2393.351_Setup_x64.exe

 

it`s fully safe

 
Hi,

 

Thank you very much for your support. Now it's better, all OK.

 

Cheers!
Hi Busem

 

 

And if I may just add to what Petr has posted...the same goes for all downloads, i.e., always look to download them either from the author's website or from a site that they recommend etc.

 

Do not use 3rd party sites as in the main they bundle 'additional' software with the main app and 'trick' you into downloading the whole lot so what you end up with is PUAs (Potentially Unwanted Applications) on your system...and many of these whilst not necessarily malware will at the very least be adware-related and so bombard you with popups, search & website redirects, etc.

 

What WSA was most likely doing when it was flagging the download as 'malware' was due to it identifying the presence of one or more PUA and alerting you to that.

 

So, to avoid PUAs, and WSA preventing downloads...always use the author's download links. :)

 

And to specifically answer the question you asked...No, this is not due to the included VPN!

 

Hope that this is of further assistance?

 

Regards, Baldrick
Hi Baldrick,

 

I was not using 3rd party site to download Opera, it was from http://www.opera.com/de. Maybe will be good somebody to double check the setup file from this location.

Once again thank you very much for your support!

 

Cheers

 
Hi Busem

 

Have just downloaded the Operra setup from the site that you mentioned...no issues downloading it & ran a check with WSA...nothing detected. Scanned it with acouple of second opinion scanners...same result. SO it is a bit of a mystery as to why WSA would block it first time around. :S

 

Regards, Baldrick 
Hi Baldrick,

 

I have sent you something from the log showwing this issue. Hope you can follow up. If necessary I'll open a ticket.

 

Cheers
Hi Busem

 

Got it! And have just replied with a recommendation that you open the support ticket given what you are seeing compared to that which I see.

 

Regards, Baldrick
Baldrick,

 

Thanks a lot, I'll do so. Keep you posted.

 

Cheers!
This was corrected shortly after the OP in this thread. 

 

-Dan
Hi Dan

 

Thanks...lightening response from the FASTEST Threat Team on the Web. ;)

 

Regards, Baldrick
Hello,

 

Today I have sent my problem to support team and they replied in less than one hour. They have examined the logs from my system and found that the detected items were the result of a false positive. The security definitions were updated and I can confirm that now have no more false positive.

I'm impressed about the support from Webroot community and reaction of support team. Thank you!

 

Cheers

Reply