php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Sec Bug #73722 Files blocked as potential virus by AVG
Submitted: 2016-12-12 11:29 UTC Modified: 2017-02-13 01:57 UTC
From: junk at talpa dot plus dot com Assigned: stas (profile)
Status: Closed Package: *General Issues
PHP Version: 7.1.0 OS:
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: junk at talpa dot plus dot com
New email:
PHP Version: OS:

 

 [2016-12-12 11:29 UTC] junk at talpa dot plus dot com 
Description:
------------
I was originally trying to upgrade my installation of PHP 7.0 from 7.0.12 to 7.0.14 via Homebrew on my Mac. This got blocked by AVG with the following error:

"Virus found XPL/Gen.B.1041_1"

See screenshot:
https://www.dropbox.com/s/wwe9oyr27ovi8pc/Screenshot%202016-12-12%2010.51.29.png?dl=0

I then tried to upgrade to 7.1.0, with similar results, this time it complained specifically about win32/build/confutils.js

Screenshot:
https://www.dropbox.com/s/0katmplx7tnj9pa/Screenshot%202016-12-12%2011.08.02.png?dl=0

I originally reported this against the Homebrew repository at https://github.com/Homebrew/homebrew-php/issues/3837 - however, it looks like AVG throws the same errors if I try and access win32/build/confutils.js from a fresh download of https://secure.php.net/distributions/php-7.1.0.tar.bz2

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2016-12-12 12:51 UTC] ab@php.net 
Thanks for the report. The AVG antivirus is not listed on virustotal.com, but other dozens of antiviruses are green. Moreover - the mentioned file is of no use on Mac, it belongs to the build system on Windows. This looks like false positive, which happen to be reported from time to time, so I would suggest you to report the false positive to the antivirus manufacturer.

Thanks.
 [2016-12-12 13:28 UTC] junk at talpa dot plus dot com
-Status: Open +Status: Closed
 [2016-12-12 13:28 UTC] junk at talpa dot plus dot com 
Thanks - I've reported to AVG and will whitelist the file locally for now.
 [2017-02-13 01:57 UTC] stas@php.net
-Package: *Compile Issues +Package: *General Issues -Assigned To: +Assigned To: stas
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Tue Jul 01 19:01:37 2025 UTC