topic I had this problem also, in Software Archive

[RESOLVED] XDK installer downloaded from intel site showing trojan Virus

Amartya_M_ — Mon, 18 Jan 2016 17:56:57 GMT

I have downloaded "xdk_web_win_master_2807" once installed my kasperskey showing a report of trojan virus

Detected object (file) was moved to Quarantine. "..\AppData\Local\Intel\XDK\xdk\node_modules\ref\build\Debug\binding.node" Application: Intel® Software Setup Assistant "..\AppData\Local\Intel\XDK\xdk\node_modules\ref\build\Debug\binding.node" Object name: Trojan-Spy.Win32.Agent.czwy, its crazy, KSN reputation is good for the installer, but how can intel site do not check for this??

Also I had the same problem!

Marcio_G_ — Mon, 18 Jan 2016 19:53:09 GMT

Also I had the same problem!

I have the same problem...

Shaun_W_ — Mon, 18 Jan 2016 20:29:19 GMT

I have the same problem... also using Kaspersky. Has anyone tried installing with a different AV? I wonder if this is a false-positive.

Same issue with kaspersky

Brian_C_4 — Mon, 18 Jan 2016 22:34:45 GMT

Same issue with kaspersky deleting binding.node -

I had this problem also,

Stephen_H_2 — Tue, 19 Jan 2016 12:03:24 GMT

I had this problem also, Kaspersky + binding.node. I have had this version of XDK installed since mid Dec but only showed up on scans yesterday. Is this really a virus? Is Intel going to respond? This could be a tad embarrassing for them. There must be thousand upon thousands of devs using XDK and some in a corporate settings also.

Problem is the object

Amartya_M_ — Tue, 19 Jan 2016 14:29:39 GMT

Problem is the object identified is kind of a Trojan, even if its a false positive (if it is!!) I need to respect my anti virus.

In that case intel should have notified the same.

Thanks for your comments guys

This is due to a virus that

PaulF_IntelCorp — Wed, 20 Jan 2016 01:04:00 GMT

This is due to a virus that was introduced on top of node-webkit, so that all node-webkit apps are now marked as a virus, which is not the case. We have asked the virus vendors to fix this. The false alarm is due to the introduction of this virus > http://news.softpedia.com/news/ransom32-is-a-javascript-based-ransomware-that-uses-node-js-to-infect-users-498342.shtml

Paul,

Amartya_M_ — Wed, 20 Jan 2016 01:47:16 GMT

Paul,
Thanks for the reply, but what you said sounds contradictory.

1. If it's a false alarm then there could have been a notification with explanation and an active approach to fix it

2. The link you have sent its in did confirming it's serious Ransomware type. So AV's are right to make a detection

3. I have downloaded the exe from intel site maintenance & security team should be more proactive and concerned about this
Intel is a name we trust otherwise we wouldn't bothered to download an IDE which need higher privileges than other normal download.and
can affect millions of computer

there should be an clear official acknowledgment.

Thanks

@Amartya, this is a brand new

PaulF_IntelCorp — Wed, 20 Jan 2016 01:58:54 GMT

@Amartya, this is a brand new event, we are working to resolve it, we do not have a way to change the false detection, that can only be changed by the virus vendors.

Just a little correction: We

Swati_S_Intel1 — Wed, 20 Jan 2016 02:38:42 GMT

Just a little correction: We are trying to resolve this, the false detection can only be changed by the anti-virus vendor.

For those who are having

PaulF_IntelCorp — Wed, 20 Jan 2016 16:48:21 GMT

For those who are having trouble with anti-virus software preventing them from downloading or running the XDK, try downloading the EA version. Our tests indicate that it is NOT being rejected by the anti-virus vendors. For more details and download info regarding the EA release see this post: https://software.intel.com/en-us/forums/intel-xdk/topic/606746 and the links within it.

This issue has been resolved.

PaulF_IntelCorp — Thu, 21 Jan 2016 22:18:45 GMT

This issue has been resolved. Please download the hotfix (v2893) from http://xdk.intel.com and see this post for more details > https://software.intel.com/en-us/forums/intel-xdk/topic/607280