forums.wsusoffline.net

When we download the file wsusoffline1092.zip from this site, the Sonicwall firewall Gateway antivirus triggers the following virus alert and blocks the download:
"Filecoder_Philadelphia.RN (Trojan)"

When I temporarily disable gateway antivirus protection to download it and then try to run it, Trend Micro quarantines it with the virus status of: Suspici.B05CB702

I uploaded wsusoffline1092.zip to virus total and it gets some matches:
https://www.virustotal.com/en/file/8049 ... 494941627/


I assume these are false positives but just letting you know in case you were not aware.

Thanks!

We are aware of it, and there are already reports like this in the forum. The false alarms are triggered by the compression used after the compilation of the AutoIt scripts UpdateGenerator and UpdateInstaller. I already suggested to not use the compression anymore to avoid false positives like this.

Regards
Dalai

Yes sorry I saw a similar post below. I've submitted a case to both Sonicwall and Trend Micro too but it usually takes a while for them to reply and update the definitions.

viewtopic.php?f=5&t=6590.