<![CDATA[VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe]]>The installer downloaded from the official NPP website has 1 detection as Trojan.Rozena.Win32.119520 on VirusTotal by Zilya. Could you please kindly clarify the reason for this detection?

]]>https://community.notepad-plus-plus.org/topic/21082/virustotal-detects-a-malware-in-the-official-npp-7-9-5-installer-x64-exeRSS for NodeMon, 20 Apr 2026 12:04:52 GMTTue, 27 Apr 2021 12:54:00 GMT60<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Mon, 03 May 2021 20:05:59 GMT]]>I just told https://www.virustotal.com/gui/file/4881548cd86491b453520e83c19292c93b9c6ce485a1f9eb9301e3913a9baced/detection to re-scan, and this time it came up clean, but the Zillya scanner is no longer listed… so presumably sites that still use the zillya scanner will continue to get false positives.

@b00kgrrl , I don’t know if it’s possible to update your Windows Security / Windows Defender / whatever’s doing the scan, but maybe you could scan the installer again, and see if you can make it work without triggering Windows Security alert.

]]>https://community.notepad-plus-plus.org/post/65583https://community.notepad-plus-plus.org/post/65583Mon, 03 May 2021 20:05:59 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Mon, 03 May 2021 19:57:41 GMT]]>@PeterJones said in VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe:

someone needs to create an official issue

I decided I would do it: https://github.com/notepad-plus-plus/notepad-plus-plus/issues/9825

]]>https://community.notepad-plus-plus.org/post/65582https://community.notepad-plus-plus.org/post/65582Mon, 03 May 2021 19:57:41 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Mon, 03 May 2021 19:27:24 GMT]]>@b00kgrrl , @Aleksandr-Baghramyan , and others,

I am quite certain that it’s a false positive.

This is a community of fellow users; posting in the Community Forum doesn’t necessarily alert the owner (@donho) or the other volunteer developers, so they probably don’t know about the issue yet.

Sometimes in the past, other regulars here have been able to work some magic to convince VirusTotal to stop giving the false positive for a particular installer – but I don’t know how, and none of them chimed in this time around.

If the virustotal report is preventing you from installing/running Notepad++ because of I.T. settings, then someone needs to create an official issue with the NPP developers, so that they can know of the issue, and look into how to correct virustotal so it stops giving the false positive.

]]>https://community.notepad-plus-plus.org/post/65581https://community.notepad-plus-plus.org/post/65581Mon, 03 May 2021 19:27:24 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Mon, 03 May 2021 19:14:23 GMT]]>Earlier today, I was prompted to update Notepad++, since I had just installed an older version. Shortly afterwards, I got an Windows Security warning that my computer security settings were now allowing malware. I then uninstalled Notepad++, which was unfortunate since it’s my favourite text editor.

]]>https://community.notepad-plus-plus.org/post/65580https://community.notepad-plus-plus.org/post/65580Mon, 03 May 2021 19:14:23 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Wed, 28 Apr 2021 11:01:35 GMT]]>You can look at this analysis as well: https://metadefender.opswat.com/results/file/0038e9c3d7b208b2f56a1b3b714cca86/hash/overview?lang=en.

]]>https://community.notepad-plus-plus.org/post/65403https://community.notepad-plus-plus.org/post/65403Wed, 28 Apr 2021 11:01:35 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Tue, 27 Apr 2021 18:57:33 GMT]]>I downloaded the installation file by following this link: https://github.com/notepad-plus-plus/notepad-plus-plus/releases/download/v7.9.5/npp.7.9.5.Installer.x64.exe, and the link to the VirusTotal report is: https://www.virustotal.com/gui/file/4881548cd86491b453520e83c19292c93b9c6ce485a1f9eb9301e3913a9baced/detection.

]]>https://community.notepad-plus-plus.org/post/65369https://community.notepad-plus-plus.org/post/65369Tue, 27 Apr 2021 18:57:33 GMT<![CDATA[Reply to VirusTotal Detects a Malware in the Official npp.7.9.5.Installer.x64.exe on Tue, 27 Apr 2021 13:38:24 GMT]]>I can’t reproduce your observation by taking the link to VT:
https://www.virustotal.com/gui/url/31b8b0d964ee218f1208e8c0130182677f07c750e77c856d28e4d4b04340c95a/detection

However I do not see Zilya as a listed scanner. Never heard of it though.

]]>https://community.notepad-plus-plus.org/post/65366https://community.notepad-plus-plus.org/post/65366Tue, 27 Apr 2021 13:38:24 GMT