Re: Why are recent Firefox (for Windows) downloads ALL being found to contain ransomware?

Andrew C Aitchison via clamav-users <[email protected]> Thu, 26 Mar 2026 18:17:38 +0000 (GMT)

Newsgroups	gmane.comp.security.virus.clamav.user
Message-ID	<[email protected]>

On Thu, 26 Mar 2026, Paul Kosinski via clamav-users wrote:

> For example:
>
> Firefox Setup 140.9.0esr.exe  --> Win.Trojan.Spora-7724442-0 FOUND
> Firefox Setup 115.34.0esr.exe --> Win.Trojan.Spora-7724442-0 FOUND
> Firefox Setup 115.34.0esr.msi --> Win.Trojan.Spora-7724442-0 FOUND
>
>
> These are from ClamAV 1.0.9 clamd on Linux receiving file to be scanned over TCP.

https://docs.clamav.net/faq/faq-eol.html#version-support-matrix
suggests that 1.0.9 went end-of-life Nov-28 2025
Version 1.3 is also EOL.

Can you verify the problem with version 1.4.3 or 1.5.1 ?

-- 
Andrew C. Aitchison                      Kendal, UK
                    [email protected]
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat