Windows 10 Defender reports Universal Print Driver contains virus (Trojan:Win32/Kovter.G)

[Jacques_Assert]

pcl6-usb-x64-6.8.0.24296.exe extracts files cleanly, but running setup.exe throws two Virus Threat messages for Kovter.G. This occurs on more than one Windows 10 system so it's not specific to one machine.

A couple of days ago, a different virus was reported: "Trojan:Win32/Powerssere.G".

Based on some other comments, this does not appear to be a new issue. Does anyone know how to circumvent, assuming that it's a false positive. I really hope that HP would not leave a corrupted driver on their website for many months.

Example of same issue:
https://h30434.www3.hp.com/t5/Printer-Software-and-Drivers/Universal-Printer-Driver-download-has-Tro...

[Raj1788]

@Jacques_Assert

Welcome to the HP Community

Could you please help me with the exact model name of the product or the product number?

Keep me posted.

Have a great day!

Cheers:)

[Jacques_Assert]

Hello Raj1788,

The printer model is an HP LasertJet 1200 but not really relevant since the Universal Print Driver executable is flagged as containing a virus when run and never reaches the first installation prompt.

The Universal Printer Driver executable was obtained from the following links:
https://ftp.hp.com/pub/softlib/software13/printers/pcl6-usb-x64-6.8.0.24296.exe
https://ftp.hp.com/pub/softlib/software13/printers/ps-usb-x64-6.8.0.24296.exe

Executing either file on Windows 10 (with Defender enabled) unzips as expected and then launches setup.exe.
Defender than reports as follows (twice per setup.exe invocation):



Note that the same virus alert occurs on multiple computers, both newly installed and older, under both Windows 10 and Windows Server 2019. A static scan of the unzipped files does not trigger the alert.

Only execution of ./setup.exe triggers the alert.

You should be able to easily confirm the virus alert on any Windows 10 system by trying to install either driver as an administrator.
Jacques

[asmita6658]

Hi @Jacques_Assert

I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post personal information (serial numbers and case details).

Thank you for visiting the HP Support Community. 

Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.

Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

Have a great day! 

[Jacques_Assert]

HP has reached out via PM however we seem to have hit a dead end in that HP appears unable to replicate the issue yet I can replicate it at will at every Windows 10 system I try. Windows 10 1809, 1903 and Windows Server 2019 all report the same virus, in the same manner, and none have been able to install the Universal Print Driver.

I have just repeated the test again, with the latest driver and definitions, and with the same result.

The Universal Printer Driver executable was obtained from the following links:
https://ftp.hp.com/pub/softlib/software13/printers/pcl6-usb-x64-6.8.0.24296.exe
https://ftp.hp.com/pub/softlib/software13/printers/ps-usb-x64-6.8.0.24296.exe

These images are from my primary machine for convenience, but I can generate others if you have any doubt.
I have difficulty believing that an HP technician can not replicate this issue.