Trojan: Win32/Varpes.M!cl in Zabbix 3.0 LTS pre-compiled agents for Windows

[jruizjimenez]

Hi

I am downloading Windows (All) pre-compiled agent for release 3.0 LTS from http://www.zabbix.com/download.php

URL of the file is http://www.zabbix.com/downloads/3.0...._3.0.0.win.zip

Browser: Chrome 64bits Versión 50.0.2661.57 beta-m (64-bit)
OS: Windows 7 64 Bits

As soon as the file is downloaded, the "Microsoft Security Essentials" says that the file has a Virus and deletes the file.

Microsoft Security Essentials:
Versión de cliente antimalware: 4.9.218.0
Versión del motor: 1.1.12603.0
Definición de antivirus: 1.217.613.0
Definición de antispyware: 1.217.613.0
Versión de motor del Sistema de inspección de red: 2.1.11804.0
Versión de definición de Sistema de inspección de red: 115.44.0.0

Virus: trojan:win32/Varpes.M (see screen shoot attached)

I read the same problem in post https://www.zabbix.com/forum/showthread.php?t=53100

Virustotal says it is safe.

Is "Microsoft Security Essentials" wrong?

Thanks

[Monitor]

No reply on this Thread?
I am new to Zabbix and the detection of a named trojan scares me a bit.
Maybe you can give some feedback on this from official site?

Thanks!

[andris]

2 online scanners found nothing:

https://www.virustotal.com/lv/file/3e92455c5f18fe553fe47e70c07a823c927801a61486f1a01187c2ae7ae4b893/analysis/1460453810/

http://r.virscan.org/report/8c65567f336b280c49efc752f5a1922b

[jlrd]

I've not seen this problem on my end. I'm running Windows Defender, latest definition is 1.217.1197.0 and it doesn't detect or flag it.

It's possible that the definitions that you had at the time had a bad a definition that cast too broad a net on some perceived signature that the the Zabbix agent binary and this virus shared.

I've never had problems with the compiled binaries from zabbix.com.

[Atsushi]

I checked by McAfee Virus Scan Enterprise 8.8.0(engine 5800.7501, DAT 8133.0000).
But I couldn't find virus.

[paredeso]

we are running "Microsoft Security Essentials"

I saw the same message from our antivirus.
Virus definition 1.217.1131.0