False positive alert - Veeam.Setup.Endpoint.dat

[firewall68]

Hello togehter,
got the Beta agent today.
extract the downloaded Zip file and start the setup on a client (win10 Company CLient)
got the error that the installation file Veeam.Setup.Endpoint.dat is infected with trojan.GenericKD.4302372 (Quarantined)
https://www.f-secure.com/v-descs/trojan ... eric.shtml

Anyone else has this problem?

Thx Mike

[Andreas_o]

Bitdefender also detects it: Trojan.GenericKD.4302372

I scanned the file with virustotal and it was detected by 11/56 AV's
https://www.virustotal.com/sv/file/e31e ... 486460470/

[Dima P.]

Nothing to worry about if you downloaded VAW Beta from our website. Both look like false positive alerts and I and going to submit a report to these vendors. Thanks guys!

[firewall68]

Thx Dima, but what about the mesage afterwoods,

Fail to initalize setup programm.Refer to setup logs for details.
i could not find any logs also no in the Rar temp.

https://ibb.co/g1XygF

i could not install it, tried to download more than one time, run as admin, etc....

thx Mike

[Dima P.]

Mike,

Try to add VAW setup the exclusion list and temporary disable the antivirus. If that does not work PM me your contact email and I'll ask support team to reach you.

[Dima P.]

Update from F-Secure:

...
Our analysis indicates that the file you submitted is clean. We have identified the issue as a False Positive, which will be resolved in an upcoming database update.

In the meantime, you may exclude this file from further scanning by the security product. You can do so using the following instructions:

Internet Security 2015:
https://community.f-secure.com/t5/F-Sec ... ta-p/56363
Client Security:
https://help.f-secure.com/product.html# ... F-12.00-en
Policy Manager and PSB Workstation:
https://community.f-secure.com/t5/Manag ... ta-p/66013
If you wish to manually update your security product's database, you can use the tools and instructions at:
https://www.f-secure.com/en/web/labs_gl ... rousel/vie
....

[kevinme]

iSheriff 5.8.21 issues Security Alert for Veeam Agent for Windows as the following:

Threat detected
A virus or unwanted application was found
Infection type: virus. Name Trojan.GenericKD.4302372

Filename: Veeam.Setup.Endpoint

I downloaded the Veeam file from here:

https://go.veeam.com/windows-backup-ty. ... _type=null

Note: Our Veeam B+R is 9.5 Update 1

[Dima P.]

Thanks for sharing. I’ll try reach this vendor to submit a false positive report.

[kevinme]

Thanks Dima!

[Dima P.]

Hi folks,

Shot update. According to Virus total Veeam.Setup.Endpoint.dat file now has detection ratio: 4 / 56

We will keep working with the rest of AV software on this false positive. Cheers!