False positive: Trojan-Downloader.Win32.Swizzor

Some anti-virus app is throwing this alert “Trojan-Downloader.Win32.Swizzor” when people download the new Skipscreen installer.

We looked into it and the detection is confirmed to be a false positive. The anti-virus software is detecting code in the inetc plugin for free and open source NSIS installer (which we use). The trojan writer must have used bits of NSIS, a popular installer used by a ton of projects, and then the anti-virus writers messed up and based their detection on this code.

We’ve alerted the anti-virus company to the error and asked them to fix it. Kinda crappy, but seems like it’s the kind of thing that happens every so often.

UPDATE: The anti-virus company has fixed the problem. Also, within a week or two we should be offering a signed installer, which means you won’t get that fear-inspiring “publisher unknown” problem.

Leave a Comment


NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>