P: Virus-Alert with Photoshop Update / Gen:Variant.Fragtor.154746

[Tobias Frank Germany]

We are using AUSST from Adobe.

For Photoshop it is downloading "AdobePhotoshop24-Core_x64.zip"

In this Zip is the file "pngquant.exe"

Some AV Scanners - in our Case Bitdefender - think the file is a Malware.

Here you can see the result for the file:

https://www.virustotal.com/gui/file/62431047de4d45455bf12ac0f9aea90ea6ad974dbef07deb7cff87f5ecd4634c...

Since today, Microsoft detected it as a "virus" too.

[Tobias Frank Germany]

The File can also be found in  the older Version "AdobePhotoshop23-Core_x64.zip"

[Tobias Frank Germany]

Detetction fixes, only one AV left.

[Agelos29222369qsrd]

Today I got the same with BitDefender: "The file C:\Users\Angelos\AppData\Local\Temp\ETR9CBA.tmp\AdobePhotoshop24-Core_x64.zip is infected with Trojan.GenericKD.66586240. The threat has been successfully blocked, your device is safe."

It is not fixed apparently...

[CShubert]

@Agelos29222369qsrd  could you share your sysinfo with the team?

It may help if we could see your Photoshop System Info. Launch Photoshop, and select Help >System Info...and copy/paste the text in a reply.  

[Tobias Frank Germany]

Hello Cory,

the Detection happens on different clients.

It is the same like in October 2022:

AUSST from Adobe.

For Photoshop it is downloading "AdobePhotoshop24-Core_x64.zip"

In this Zip is the file "pngquant.exe"

When our clients download the Photoshop Update from our AUSST Server to there local cache folder the Virus Scanner alerts because of the zip "AdobePhotoshop24-Core_x64.zip" and the file "pngquant.exe" in the zip.

Newest Virustotal scan for the file shows today only 2 scanners, the last days it was about 8.

https://www.virustotal.com/gui/file/41552819a1fb41fe7c5147828e4c52ddc8fcf39eb82ea8eb9733314f9a219663...