Bug 144937 - soffice.exe quarantined by immunet/clamwin
Summary: soffice.exe quarantined by immunet/clamwin
Status: RESOLVED NOTOURBUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Installation (show other bugs)
Version:
(earliest affected)
7.1.6.2 release
Hardware: All Windows (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-05 09:51 UTC by rainer.schoenen@gmx.net
Modified: 2021-10-05 10:27 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:

Attachments
immunet reports soffice.exe (92.98 KB, image/png)
2021-10-05 09:51 UTC, rainer.schoenen@gmx.net 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description rainer.schoenen@gmx.net 2021-10-05 09:51:02 UTC 
Description:
After installation, soffice cannot be executed.
Virus protection (immunet/clamwin) seems to automatically put soffice.exe into quarantine each time.
Am I targeted by a personalized attack or does this affect everyone?

Steps to Reproduce:
1. execute LibreOffice_7.1.6_Win_x64.msi
2. follow installer
3. call desktop link first -> no function (soffice.exe disappears)
4. call desktop link second -> error message of missing file
5. looking into install folder reveals soffice.exe has disappeared
6. immunet virus scanner silently quarantined soffice.exe

Actual Results:
immunet reports soffice.exe as:
"Detection name": Clam.Win.Malware.Dqan-9897603-0

Expected Results:
soffice.exe should stay and allow program to run.


Reproducible: Always


User Profile Reset: No



Additional Info:
immunet reports soffice.exe as:
"Detection name": Clam.Win.Malware.Dqan-9897603-0
Comment 1 rainer.schoenen@gmx.net 2021-10-05 09:51:56 UTC 
Created attachment 175531 [details]
immunet reports soffice.exe
Comment 2 Buovjaga 2021-10-05 10:27:50 UTC 
Please report it as a false positive to Immunet https://support.immunet.com/forum/7-false-positives/