FORTICLIENTVPNONLINEINSTALLER.EXE reported as Spyware.PasswordStealer

[piersdavenport]

Hi,

I am using Malwarebytes Premium v. 4.5.10.200 and during the daily scan it reported that the Fortclient VPN online installer is infected with Spyware.PasswordStealer. I have had this file for 2 months and it has only just reported it. I have scanned the file with Symantec Endpoint Protection 14.3 RU5 and it comes back as clean. HP Wolf/Smart Scan also found it clean. The Forticlient VPN installer was downloaded directly from Fortinet ( https://links.fortinet.com/forticlient/win/vpnagent ). It was also not detected by my Fortigate UTM/Antivirus. I just downloaded the file again and scanned the new download (same version) and it says it is infected. Can you please investigate this further.

Malwarebytes Log extract:

-Software Information-

Version: 4.5.10.200

Components Version: 1.0.1702

Update Package Version: 1.0.56867

Licence: Premium

 

-System Information-

OS: Windows 10 (Build 19044.1766)

CPU: x64

File System: NTFS

User: System

File: 1

Spyware.PasswordStealer, C:\USERS\xxxxx\DOWNLOADS\FORTICLIENTVPNONLINEINSTALLER.EXE, No Action By User, 533, 1068539, 1.0.56867, , ame, , 5276F659E56BCC88D3BB55127677D8E8, 51C5BD277D73FF062AD4A083FA6CD9A718748CAA18659900B17F1255CBFF508E

 

Regards

 

PD

[Spud]

Thanks, this will be fixed in the next update.

[piersdavenport]

Thanks,

Will that be in the daily updates or the next software version update?

 

[Spud]

Next update in around 2 to 4 hours time.

[piersdavenport]

Great,

Thanks for your assistance.