Installer detected as ML/PE-A virus by Sophos

[gdalbec]

Sophos Home is reporting:

Threat cleaned

Application, file or content detected as malicious

Hide Advanced Options ML/PE-A C:\Downloads\mt86plus_6.00_USB_Installer.exe

The 6.00b3 file is fine...

[gdalbec]

The nightly from Nov 10 is fine too...

[x86fr]

ML/PE-A is Sofos' heuristic detection based on "IA Deep Learning". It reports a lot of false-positive and this is one of them.

I totally understand why a generic heuristic detection tool might detect a "potential thread" with the installer (it RAW write to a storage unit), but this should be handled by their detection engine.

Anyway, I will report this to sofos.

[x86fr]

Reported to Sophos

[debrouxl]

Stupid pro-virus software based on stupid "artificial intelligence" and "deep learning" is stupid.

[x86fr]

Fully agree!