F-Secure PSB Workstation reports `...\AppData\Local\Keybase\runquiet.exe` as Virus
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- Avg merge
- 12h 58m
- Merged PRs (30d)
- 56
Description
Windows 10
Keybase GUI Version: 1.0.21-20170413113755+766e240
My F-Secure AV has now twice reported runquiet.exe as a virus: Gen:Variant.Symmi.73621 (virus). First time it quarantined it, the second time automatically deleted it.
Is there something to do, other than mark the file as false positive? What does the executable actually do? Updates the GUI in the background?
Just wanted to let you know.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by investigating the reported runquiet.exe in the Keybase GUI context and determine what the executable does. Done means documenting its purpose and establishing whether the F-Secure detection is a false positive or requires a product change.
Written by the indexing model from the issue text.
Assessment
- Domain
- desktop, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100