Jump to content

Virus Total detection

Recommended Posts

I’ve just used Task Explorer (from Objective-see.com) to scan my Mac and found Bkav Pro in the Alfred Framework:


/Applications/Alfred 4.app/Contents/Frameworks/Alfred Framework.framework/Versions/A/Alfred Framework


The report can be seen here:
One engine detected this file
Bkav Pro: VEX.Webshell

Is it something that we should be concerned about?


(Anyway, this is a new Mac, installed very few softwares so far.)

Screenshot 2021-01-23 at 9.23.16 AM.png

Link to post

Yet if you scan the whole app, there’s no detections. VirusTotal found a single hit from one antivirus vendor which I never heard about. I trust Alfred’s team and maliciousness doesn’t even enter the equation, but in the spirit of thoroughness (e.g. maybe the development machine was compromised) I decided to search online for VEX.Webshell.


All I found were matches by Bkav Pro, and all of them were false positives. This specific case with Alfred had already been discussed in Reddit.


There’s nothing to worry about.

Link to post

@pazu This is a false positive; a web shell isn't even a relevant type of issue with the type of app that Alfred. We've reported this false positive to Bkav in the past, and they're completely unresponsive.


Alfred is built and signed on a completely isolated machine, then both developer signed and notarised by Apple.  As a further assurance, always download Alfred from our website https://www.alfredapp.com and never from third-party websites.


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...