Trojan in Photoshop download file?

[sylvanex]

Hello all! 

After downloading Photoshop from what I believe is the official location (https://creativecloud.adobe.com/apps/all/desktop/pdp/photoshop) (I also tried this link as well), I scanned the file in an abundance of caution but noticed that both VirusTotal and hybrid-analysis have marked Photoshop_Set-Up.exe as a malcious file with a fairly high threat score (75/100), indicating that it is a Trojan/wacatac (results in hyperlink).  The same scenario happened with similar but slightly different detections for the Lightroom setup file as well.  I am hoping someone can help clarify some of these results, because, if they aren't truly malicious, these are some pretty serious false positives.

Thanks!

[Akash Sharma]

Moved to Get-Started.

[Jeff A Wright · Accepted solution]

Sylvanex, my apologies for any difficulties that you are encountering. The original file you download is nothing more than a lightweight bootstrapper and does not include the actual installation files for Photoshop CC.  Please verify that your anti-virus software is up to date and then use the process listed in https://helpx.adobe.com/creative-cloud/help/download-install-app.html to begin the installation process.

[sylvanex]

Jeff, thanks for your reply!  That would make sense if it's a bootstrapper that it's appearing as questionable on those scanners, and it's good to be reassured they were the legitimate downloads.  I will use your link to complete the setup then!  Thanks again.

[dfhjfhj5C39]

so my friend got the trojan virus from this. how can he delete the virus?

[John226515699wtg]

Jeff that's BS and you eithger know that or you're blind to the fact that adobe is either being hacked or doing the hacking.

!2 months and 10 computers, 12 cell phones and no one can tell me why my machines keep gheting hacked. They all agree it's filled with malware but can't explain where it comes from.

So now I believe it's from adobe. I've been using your software for years as I'm a Crrative Director for an advertsing agency but I didn't realize it was riddled with viruses. Ever since I started using adobe creative cloud. That thing is dangerous. So today I finally figure out with the help of virus total every download from adobe ie Acrobat, and PS..... not only had those trojans but...... wait for it..... can't wait to hear your reply......contains .exe files that actually accroding to virus total stop Microsoft defender amongst other MS services.

I called customer service today and was bounced around an Indian call centre from one clueless person to the next....or were they clueless? FInally they emailed me the link to CC and Acrobat and when I put them through Virus Total they all came up for Torjans etc. I mentioned this to the gentleman on the other side of the phone. His response. "Just install it don't worry' Of course I refused. And when I asked him if I should send him the files I had downloaded off the adobe site that were riddled with viruses so your IT or software peeps could look at it. He said quote "we are not in the anti-virus biz" Wow! I remained composed but sure as hell I refused that as an answer. We debated over this for another 20 minutes when he suggested I screen share with him. IS THIS ADOBE PRACTICE? Just cause I he kept insisiting and then making passively agressive comments about me not letting him.

I need a resolution on this as I cant afford any more computers phones or waste of my sanity.

Could you please connect me with someone as I've consulted with my firm's attorney's who are more than willing to litigate. A year, well almost year and a half of living a digitial nightmare that translated in to my real life including work and relationships. Well thats some serious compensation.

I had believed maybe this malware was attaching it self to downloads but from reading this persons issue who started htis conversation and my dealings with India  today this sounds like its an issue from your side.

I'm going to do sone research now and see how many others are affected.

Awaiting your response.....

Respectfully

John