Trojan in Calibre portable 4.91?

[Kefir]

Bitdefender reports Trojan.GenericKD.4228400 in Calibre portable 4.9.1 (calibre-portable.exe).

Anybody experienced a similar behaviour?

[kovidgoyal]

Completely clear according to 70 antivirus products

https://www.virustotal.com/gui/url/4...370a/detection

[Kefir]

That's what I thought. Thank you.

[joelack99]

Bitdefender is fine with it but it won’t install for me. “Failed to move Calibre-portable.exe, make sure calibre is not running”. It is not. No, the disk isn’t full

[joelack99]

Update: Bitdefender did not report an error on scan but after update attempt, the Bitdefender log says: Threat Blocked: Trojan.GenerickKD.42284001 Path: F:\Calibre\Calibre Portable\Calibre Portable\_unpack_calibre_portable\Calibre Portable\calibre\portable.exe
I had already deleted that unpack directory in attempt to get installation to proceed. Now it's acting like it doesn't have write permissions.

[JSWolf]

Bitdefender needs to go. It doesn't work well. Too many false positives.

[stumped]

Originally Posted by JSWolf

Bitdefender needs to go. It doesn't work well. Too many false positives.

I use bit defender free only on Android tablets, as its very unobtrusive. It has yet to actually detect anything but i would not expect it to. I only use reputable sources.
Malware bytes, which I use on pc, has an annoying habit of starting very slow complete scans on tablets. All I need is for new apps or files to be checked. I don't need a rescan of the 200 apps that it scanned last week!
M does fully scan the pc regularly but usually I am only aware it has happened when a pop up says finished and all clean. There is no visible slow down.

[JSWolf]

Originally Posted by stumped

I use bit defender free only on Android tablets, as its very unobtrusive. It has yet to actually detect anything but i would not expect it to. I only use reputable sources.
Malware bytes, which I use on pc, has an annoying habit of starting very slow complete scans on tablets. All I need is for new apps or files to be checked. I don't need a rescan of the 200 apps that it scanned last week!
M does fully scan the pc regularly but usually I am only aware it has happened when a pop up says finished and all clean. There is no visible slow down.

The way I'd like to see scanning work is a full scan is done and then not done unless something is found. Anything missed in the full scan will be found in normal use.

[joelack99]

I've never had it pick up anything on file scans. But it does find web intrusion threats regularly if I leave the content server running. False positives? Maybe. Not inclined to turn it off to see.

[joelack99]

Originally Posted by joelack99

Update: Bitdefender did not report an error on scan but after update attempt, the Bitdefender log says: Threat Blocked: Trojan.GenerickKD.42284001 Path: F:\Calibre\Calibre Portable\Calibre Portable\_unpack_calibre_portable\Calibre Portable\calibre\portable.exe
I had already deleted that unpack directory in attempt to get installation to proceed. Now it's acting like it doesn't have write permissions.

If you've read this far and are curious you may want an update:
I fixed my install problem but not sure what was wrong:
1) I disabled Bitdefender and tried to install -- it still failed; it is unable to copy the .exe into my portable directory. The trojan/virus thought was, as Kovin and JS Wolf indicate, a false positive and not my issue.
2) I created a new directory and installed fresh into it with no problems, then I copied the portable .exe and the Calibre directory from it into the original Calibre directory. Runs fine.

So apparently I can copy files where the installer failed. Yet it was running under my account and should have had no problems. wonder why?

[calibreuserguy]

https://www.virustotal.com/gui/file/...5a2a/detection

16 antivirus platforms identified malware on the calibre-portable.exe file.

[kovidgoyal]

calibre-portable.exe is built from a single file, https://github.com/kovidgoyal/calibr...ows/portable.c

that has not changed in 6 months, so I suggest following the advice in https://manual.calibre-ebook.com/faq...a-virus-trojan

[calibreuserguy]

Version 4.8.0 has fewer hits than version 4.9.0 and 4.9.1, so it does appear that something changed between them.

Version 4.8.0:
https://www.virustotal.com/gui/file/...c592/detection

[JSWolf]

Originally Posted by joelack99

I've never had it pick up anything on file scans. But it does find web intrusion threats regularly if I leave the content server running. False positives? Maybe. Not inclined to turn it off to see.

You don't have to turn off Bitdefender. You have to uninstall it.

[theducks]

I agree. Get another A/V

A rare false positive may happen.

Repeated false reports lead to ignoring them, and one day a REAL Positive will slip thru.

If you doubt us: Go look at the Calibre Stats page.
Don't you think more than 1 or 2 folk would be screaming VIRUS, here