Solved 7ZIP file flagged as malware?

ive been using this program as it is reliable. an update is avaliable. ran it through virustotal and one entry is malware. do the update anyway? one bad entry and the rest were all clear

Helmuuth said:

ran it through virustotal and one entry is malware

Click to expand...

Totally unneeded in my opinion. Not sure why you would need to do that if you download from the source.

7-Zip version 25.0 was released on July 5.

7z2500-x64.exe -> sha256:7b67375b2b303e05d2989f23e986126eda67435c71231fa4b0bdaeb7a619a0a6

Someone renamed the file (for unknown reasons), but the SHA256 matches what's listed on the GitHub page. So it's a legitimate file.

antspants said:

Totally unneeded in my opinion. Not sure why you would need to do that if you download from the source.

7-Zip

Click to expand...

thats where i got the update then ran it through virustotal.

Helmuuth said:

thats where i got the update then ran it through virustotal.

Click to expand...

False positive or just a useless scan process.

nvm lol i just downloaded update since bitdefender scan showed all is clear.

Right. If you have a decent antivirus software, virustotal is just overkill. Again, just my opinion.

You should be able to “Check for updates” in 7zip and let it update itself.

antspants said:

You should be able to “Check for updates” in 7zip and let it update itself.

Click to expand...

7-Zip doesn't have a built-in updater, a user must manually find the new version in the official website or repository.

Thank you for the replies guys

If the 7zip file came bundled inside of another app, sometimes virus scanners think it's malicious because it CAN be used to extract files from a multitude of file types. So the BEHAVIOUR probably matched some signature, but the actual file its self is safe.

Can you post the VirusTotal link here so I can check out the other information about it?


------------------------------

AngusAranda said:

If the 7zip file came bundled inside of another app, sometimes virus scanners think it's malicious because it CAN be used to extract files from a multitude of file types. So the BEHAVIOUR probably matched some signature, but the actual file its self is safe.

Can you post the VirusTotal link here so I can check out the other information about it?

Click to expand...

Firstly, they said they downloaded the file from 7zip
Secondly, reading the thread, the issue seems to be sorted.

On 7zip's GitHub page, there's an open ticket about other users discussing it:

I don't think a developer has spoken to it just yet.


------------------------------

AngusAranda said:

On 7zip's GitHub page, there's an open ticket about other users discussing it:

7-zip 25.00 installer reported to contain a trojan · Issue #131 · ip7z/7zip

github.com

I don't think a developer has spoken to it just yet.


------------------------------

Click to expand...

Thanks for the link

It's very strange, because the day of the release I downloaded the 09 files (04 Windows .exe, 04 Linux .tar.xz, and 01 macOS .tar.xz), and then today I downloaded again those 09 files.

I didn't have any Windows Security detection or problems. I use JDownloader with "Keep the Original Modified Date from Server" option enabled (because I like to have the same date from website and not the day I downloaded).

7-Zip is working fine for me. The MSI installers weren't flagged. Only the EXE installers.

gy405 said:

7-Zip doesn't have a built-in updater, a user must manually find the new version in the official website or repository.

Click to expand...

If you install via winget it then gets updated automatically.

AngusAranda said:

If the 7zip file came bundled inside of another app, sometimes virus scanners think it's malicious because it CAN be used to extract files from a multitude of file types. So the BEHAVIOUR probably matched some signature, but the actual file its self is safe.

Can you post the VirusTotal link here so I can check out the other information about it?


------------------------------

Click to expand...

here is list:

Bkav Pro W32.AIDetectMalware

Acronis (Static ML) Undetected
AhnLab-V3 Undetected
Alibaba Undetected
AliCloud Undetected
ALYac Undetected
Antiy-AVL Undetected
Arcabit Undetected
Arctic Wolf Undetected
Avast Undetected
AVG Undetected Avira (no cloud) Undetected
Baidu Undetected
BitDefender Undetected
ClamAV Undetected
CMC Undetected
CrowdStrike Falcon Undetected
CTX Undetected Cynet Undetected
DeepInstinct Undetected
DrWeb Undetected Elastic Undetected
Emsisoft Undetected
eScan Undetected
ESET-NOD32 Undetected
Fortinet Undetected
GData Undetected
Google Undetected
Gridinsoft (no cloud) Undetected
Huorong Undetected
Ikarus Undetected
Security vendors' analysis Do you want to automate checks? 7/7/25, 11:51 AM VirusTotal - File - 7b67375b2b303e05d2989f23e986126eda67435c71231fa4b0bdaeb7a619a0a6 VirusTotal 1/3Jiangmin Undetected

K7AntiVirus Undetected
K7GW Undetected
Kaspersky Undetected
Kingsoft Undetected
Lionic Undetected
Malwarebytes Undetected
MaxSecure Undetected
McAfee Scanner Undetected
Microsoft Undetected
NANO-Antivirus Undetected
Palo Alto Networks Undetected
Panda Undetected
QuickHeal Undetected
Rising Undetected
Sangfor Engine Zero Undetected
SecureAge Undetected
Skyhigh (SWG) Undetected
Sophos Undetected
SUPERAntiSpyware Undetected
Symantec Undetected
TACHYON Undetected
TEHTRIS Undetected
Tencent Undetected
Trapmine Undetected
Trellix ENS Undetected
TrendMicro Undetected
TrendMicro-HouseCall Undetected
Varist Undetected VBA32 Undetected
VIPRE Undetected VirIT Undetected
ViRobot Undetected
Webroot Undetected
WithSecure Undetected
Xcitium Undetected
Yandex Undetected
Zillya Undetected
ZoneAlarm by Check Point Undetected 7/7/25, 11:51 AM VirusTotal - File - 7b67375b2b303e05d2989f23e986126eda67435c71231fa4b0bdaeb7a619a0a6 VirusTotal 2/37/7/25, 11:51 AM VirusTotal -

File - 7b67375b2b303e05d2989f23e986126eda67435c71231fa4b0bdaeb7a619a0a6 Zoner Avast-Mobile
BitDefenderFalx SentinelOne (Static ML) Symantec Mobile Insight
Trustlook Undetected Unable to process file type Unable to process file type Unable to process file type Unable to process file type Unable to process file typ

They closed the ticket on GitHub, Microsoft Windows Defender isn't reporting it anymore.