A host of anti-virus engines are flagging recent Dell printer drivers as unsafe

[Karlston]

A host of anti-virus engines are flagging recent Dell printer drivers as unsafe

 

Recent releases of Dell printer drivers for various versions of Windows are being flagged by a number of anti-virus programs as malware, as spotted and reported by journalist Brian Krebs on Twitter (via WindowsCentral). A few examples of such reports can be viewed on Virus Total that provides logs of malware detection by various anti-virus programs.

The drivers in question seem to include releases from Dell in the past few months, including one from September 24, detailed here. Krebs posted the results of the file in the logs on Virus Total, which show the file being flagged as “Malware” or “Trojans” by a number of programs including the likes of Avast, McAfee, Microsoft, Fortinet, and more. The logs suggest that at least 29 anti-virus engines detected the file as unsafe.

 

It is currently not clear what is triggering these detections, and if the said files are safe for installation or have been compromised. Krebs suggests that users that are looking to download the latest drivers hold off on downloading them for the time being. It is possible that the computer maker re-releases the drivers after scrutiny or provides an update at the least about the reports and the validity of its driver offerings.

 

 

A host of anti-virus engines are flagging recent Dell printer drivers as unsafe

 

[zanderthunder]

4 hours ago, Karlston said:

It is currently not clear what is triggering these detections, and if the said files are safe for installation or have been compromised.

Not sure if the method of packers used by the installer and how these files are compiled are to do with the detection tho. Normally, drivers undergoing QC checks to ensure no problems with the driver.

[steven36]

3 hours ago, zanderthunder said:

Not sure if the method of packers used by the installer and how these files are compiled are to do with the detection tho. Normally, drivers undergoing QC checks to ensure no problems with the driver.

Dell  pulled  the Driver  Update installer  yesterday

 

Quote

 

Update November 10 (4:55 p.m. ET) — Dell pulls links, says it is investigating claims

Dell says that it has removed the files from public access and is investigating the claim that they are malicious. "Our cybersecurity team has removed the files (and the links to the files) and are investigating the claim that they are malicious," Dell said in a statement to Windows Central. "The files are no longer accessible to the public. The security of our networks and products is a top priority and critical to protecting our customers' information."

 

https://www.windowscentral.com/psa-dell-printer-drivers-flagged-malware-antivirus-engines