Is GlassWire a virus? (solved)

[random_guy]

Virus Total says that its a trojan

[Remah]

Almost certain that it is not.

VirusTotal says that one of the scanners reports a problem. This is likely to be a false positive like in several other topics.

For example:

Virus Total Scan flagged "GlassWire Control Service"

It appears to be a false positive. This means that a scanner reports that it has found what might be a threat but the threat is unable to be confirmed because it probably never existed. FYI, a link to the actual report is the best way to report this. It’s easy for the GlassWire team and other users like me to see the report: https://www.virustotal.com/#/file/8fb6c5477ea7ea839f081673f51b5e1e624e05c6009b3e5adf0ccef1d676fcc2/detection What is the evidence that it is a false positive: No other …

[random_guy]

Thanks for telling me!

[GlassWare]

Just my thoughts. I would only download the software from the trusted Glasswire website. And you can also compare the hash value. Some dark places could add payloads to .exe files. So, rule of thumb be careful where you get your software sources from.

[random_guy]

I downloaded it from the GlassWire official site.

[Ken_GlassWire]

@random_guy

VirusTotal’s API is built into GlassWire, but turned off by default. You can turn it on by following these instructions.
https://www.glasswire.com/userguide/#Virus_Total

Our FAQ covers this issue https://www.glasswire.com/faq/.

Why is GlassWire flagging itself as malware under the VirusTotal column?

GlassWire itself may occasionally be flagged as malware by VirusTotal as a false positive. If you have any concerns about this please email us, or post in our forum so we can help you.

Thanks for posting in the forum so we can help.

1. I notice the file you uploaded to VirusTotal is not named as we name it on our website. We always name our file GlassWireSetup.exe https://download.glasswire.com/GlassWireSetup.exe but it appears this file is not named that.

2. I uploaded our GlassWireSetup.exe to VirusTotal.com and found the same results as you. It appears this company “Antiy-AVL” flagged our installer. I then searched for “Antiy-AVL false positive” and found what may be their contact web page here. https://www.antiy.net/contacts/

I then emailed the contact info on the page so they could investigate the false positive.

It is possible that perhaps this page is wrong because the word “business” is misspelled on this page. If someone knows the correct URL for their website please let me know. Or perhaps this is really their page and they misspelled the word “business”. I don’t know.

Hopefully they will respond soon and solve the issue if this is really the correct website for that company.