Font file on github detected as malware...

Comodo Internet Security - CIS AV False Positive/Negative Detection Reporting
1

Hi there, im new here. Im pretty sure i found the right forum.

Anyways. I use this text editor called atom. It is an open source text editor that is also modular. Allowing people to make plugins for it of all kinds.
I downloaded a plugin for it which installs various monospace fonts. One of them being Quinze.
However, comodo detects only one of the font files as malware but not the others, i do not understand why.

The plugin can be found here on atoms official page link removed by moderator
It can also be found on github link removed by moderator.
The font file can be found in the github developer page in “resources/quinze/quinze.ttf”

I have not said anything to developer yet.

2

Hi Emenema,

Thank you for reporting this.
We’ll check it and get back to you soon.

Regards,
Navya

3

Hi,

This is to inform you that the file you have submitted was not a FalsePositive.

Regards,
Karthik R
Comodo AntiVirus Lab

4

No? What does it do?

5

That seems odd as well.

I think it would take a week of dissecting to find out what that font file does…

6

I hope Karthik wanted to say that the file was not detected.
:slight_smile:

7

I’m the maintainer of said Atom package, and I don’t understand this:

This is to inform you that the file you have submitted was not a FalsePositive.

Is it, or is it not malware? ???

FYI, this is the source for the Quinze font: link removed by moderator

8

Doesn’t look good:

Will be pulling the font from my package and am in touch with Open Font Library about the issue.

9

Thank you for reporting. I have removed the url’s pointing to the font and kept the url’s for reference.

10

The font author updated the files and they’re now all green on virustotals.com:
VirusTotal
The Atom fonts package will be updated to restore Quinze.

11

Thank you for reporting back. :-TU