WUBI installer download triggers a virus alert

[Vincentzio Roman]

When I download the Windows installer for Ubuntu, I get a virus alert, IDS_ALERTS_DIALOG_CAPTION about a file 5B.tmp with the virus New Win32. The file is deleted and the download stops.

[Ubuntu Foundations Team Bug Bot (crichton)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/891736/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

[Dmitry Shachnev (mitya57)]

Not a bug in Ubuntu, but rather in WUBI.

[Phil. V (philip.v)]

I downloaded a fresh WUBI and submitted it to virustotal to check, and 0/42 scanners reported anything harmful. My system didn't halt the download either, and my HIPS and heuristics are set to be quite aggressive. I think this is most likely a false positive from your security software, and therefore a problem on your end and neither WUBI nor the Ubuntu website is at fault. I'm hesitant to invalidate this report, though, as it's possible that a specific download mirror was compromised. It's not reasonable to expect the WUBI folks to tailor their program to look less like a virus when 0/42 of the most reputable security programs don't have a problem with it, so I'm going to file this against the Ubuntu website with the recommendation that they double check that the download servers haven't been compromised before they invalidate this.

[Anthony Dillon (ya-bo-ng)]

Hi Vincentzio,

Ubuntu.com no longer provides wubi as a download. The is extended work required to make it compatible with windows 8. Therefore this issue has been resolved from the latest release.

Thank you,
Ant.