forum post assistant showing virus on download

[sozzled]

Supplementary information:

Users of Win10 can submit a request for "fixing" this problem. Windows Defender SmartScreen has a built-in, web-based feedback system in place to help customers and website owners report any potential false warnings as quickly as possible.

For people who use Internet Explorer, from a red warning, click More information then Report that this site contains no threats. This will take you to a feedback page where you can indicate you are a site owner or representative. Follow the instructions and provide the information on this site to submit a site for review.

To report feedback from the Internet Explorer Download Manager, Right-click on the blocked download and choose Report that this file is safe. This will take you to the feedback page.

Once a dispute is submitted, a team from Microsoft will inspects the site in question. Disputes should be submitted through the website reporting process to ensure the quickest resolution.

In Microsoft Edge, click More information then Report that this site does not contain threats.

[phidias81]

Thanks for answer but the ForumPostAssistant embed a trojan !!!

Backdoor:PHP/Yorcirekrikseng.E

After a few discussion with our technical support for the webserver , he downgraded the server in PHP 7.2 ...
I read all the three posts but i didn't find a similar case.
We didn't implement nothing on our website , and the problem appear during the week-end and disappear alone

Windows defender detected the same Yorcirekrikseng.E on a local copy of FPA downloaded locally yesterday. Should I ignore it?

[toivo]

Yes, that is a false positive, as indicated above.

[Toffi2]

'Failed - Virus Detected' on Windows 10
Go to Windows Security > Tamper Protection
I had to disable this in order to allow the download of FPA. It reminded me a bit later to enable it again after.

[websroger]

Toffi2: I go to Windows Security and find no option with the label "Tamper Protection" :?

[mandville]

Change the Tamper Protection setting

In the search box on the taskbar, type Windows Security and then selct Windows Security in the list of results.In Windows Security, select Virus & threat protection and then under Virus & threat protection settings, select Manage settings.Change the Tamper Protection setting to On or Off.

[Webdongle]

Methinks at one time there was a choice when defender warned. I can download with ff and with chrome but not with edge. Have mcafee and that does not warn.

There is https://www.thewindowsclub.com/prevent- ... r-warnings but two problems with that
1. If users understand that then they probably don't need help.
2. The Group Policy Editor is not enabled on Windows 10 Home edition.

[websroger]

I've turned Tamper protection off, but still get a stop on download with a virus warning. Something else I can do?

[sozzled]

Until I read this discussion, I had no idea about the new Tamper Protection features in Win10. I browsed the 'net and found a few articles that discuss it (e.g. https://www.guidingtech.com/tamper-prot ... indows-10/).

I have not done any personal research into what specifically prevents the download or upload of the FPA software to or from a Win10 PC. It may be Tamper Protection or Windows Defender SmartScreen or a combination of both. It seems that the most recent matters in this discussion are an extension of the general issues pertaining to Win10.

There are other ways to transfer the Forum Post Assistant software to a website and use it.

What I can say with reasonable confidence, however, is that many of the regular users of this forum strongly disagree, 95% of time, with what I think or they ignore me. We'll just have to leave it at that.

[Webdongle]

Step #5 of https://www.guidingtech.com/tamper-prot ... indows-10/ my screen looks totally different.

[sozzled]

AFAIK—and I know very little—Tamper Protection is not a customisable feature of Win10 Home edition; it may be customisable on other variants of Win10 and this may explain why the screenshot(s) shown in articles/tutorials that exist around the internet may be different to our own experience. I can only say, with a confidence level that varies between 0.5 and 0.9, that the "virus alert difficulties" discussed in this forum affect people who use Window 10 and/or security policies enforced within their SOEs.

There is also a higher probability (varying between 0.8 and 1.0) that

1. using an operating system that is *not* Win10, or
2. disabling all and every anti-virus/anti-malware software currently installed on your PC, or
3. using a device *not* equipped with an enterprise's SOE

will allow people to transfer the FPA software between their PC and their website.

[Webdongle]

It's a catch 22 ... many users (that need to ask questions) have difficulty unzipping and uploading the fpa. They are going to have serious problems disabling their computer security. Houston 'we have a problem'

Addendum
The solution for windows defender
1. When the warning (after clicking save) appears then click 'View downloads'.
2. Then (in the top right of the screen) right click the file and select to download it.

Not seen that anywhere. Has anyone else?

[sozzled]

It's fine with me, @Webdongle. I don't consider it to be a "catch-22" but, as I've written earlier, a lot of people completely disagree with my opinion(s) about [most] things. I don't have this problem myself because I can work around it (without requiring a degree in software engineering to figure out the solution) and I don't encounter the alarmist "serious problems" that some people have suggestged.

Well, indeed, to quote "Houston, we have a problem" (from Apollo 13) but, at the end of the story, all the astronauts were rescued, weren't they?

[Webdongle]

... I don't have this problem myself because I can work around it ...

But the users who have problems are the ones that find it difficult to override the security.

[sozzled]

@Webdongle, see viewtopic.php?f=806&t=977089