Virus Protection Saying Update Has a Virus

Thanks, Ekalb. I've passed this along to the team.

Hello,
Here is the VirusTotal report for 1PasswordSetup-8.9.5.exe:
https://www.virustotal.com/gui/file/9151f43042b2751ef7e502d1b4108451b8b0cde9b69022ae136e35737b543d86
No malicious detection on 67 analyses, including Bitdefender.

Hello @DavidinLA,

Thanks for getting back to us with this report. We'd like to investigate further and I've passed these details along to the team.

ref: dev/core/core#17625

The file C:\Users\david\AppData\Local\1Password\update\8\resources\app.asar.unpacked\index.node is infected with Gen:Variant.Tedy.163778. The threat has been successfully blocked, your device is safe.

Hi @DavidinLA:

You can always get in touch with us directly via email at support@1password.com.

Does Bitdefender indicate a specific file is the problem, or just 1Password for Windows in general during the update process? Let me know.

Jack

@DavidinLA

Anti-virus products use a combination of heuristics and simple patterns to match key parts of certain types of files that can carry malware. Sometimes these false-positively match newly released files. Eventually these get reported to the A/V vendor, and they eliminate the false-positive in an update in their A/V definitions.

You can upload any concerning file to a site such as VirusTotal, which will run dozens of A/V products against the file(s) and report their findings. If you find just one report an issue, you can almost always assume it's a false positive. Of course it could be the case that a file contains some new malware that only one A/V product is detecting, but since they share their findings very quickly, this would be rare.

Here's a link to their site, but you can do your own search to find it:

https://www.virustotal.com/gui/home/upload

I assume you can download the version you're concerned about from the 1Password site. Once you have it, upload it to VirusTotal.

I hope someone who works for 1Password can answer this. I can't use or install an app that says it has a virus attached. And there seems to be no direct customer support that I can find anymore. Anyone? crickets.