Latest 2023-0-397-152 Installer – Trojan Backdoor:Win32/Bladabindi!ml Detected

See:

Can SketchUp confirm if this is a false positive.

1 Like

It looks like there is a problem with the installer (.msi), downloaded within/ inside Sketchup. :thinking:

What happens if you download it from here?
Download All | SketchUp

@Mark ?

Same problem Dezmo :slightly_frowning_face:

Thanks for the heads-up; our team is looking at that straight away and we will reply with more info.

2 Likes

We will reach out directly to the user to get more specific information to help in understanding the issue. We will post another update after gathering more info.

2 Likes

Just installed the Sketchup 2023 and get Backdoor:Win32/Bladabindi!ml .
Sketchup Virus

I’ve also had the same instance while trying to download the software on Windows 10 64-bit. It might be a good idea to disable the download link until it’s figured out.

1 Like

Tagging @WebHorst because I think he is the person investigating this.

I heard back from that team. Here is their response:

Before we release a new SketchUp installer, we always run it through VirusTotal. VirusTotal uses dozens of scanners including BitDefender, AVG, Kaspersky, and McAfee just to name a few. We have a clean bill of health for this installer and would only release it if that were the case.

Furthermore, we always find a few false positives that could be system dependent or AV scanner dependent. We have filed a report with the Microsoft security team regarding the finding that has been noted in the two forum posts. To resolve this, you can disable Windows Defender during installation of SketchUp. Please let us know if that doesn’t work. If you really are concerned, you can also run the downloaded installer through the VirusTotal service.

You may report false positives with Microsoft. The guidelines for doing so are at;
https://www.microsoft.com/en-us/wdsi/filesubmission.

2 Likes

Colin, can you be more clear? Should people ignore this error and install anyways or should people wait to update? Will Trimble be re-packing this install into a new presumably clean installer? Or no?

I temporarily turned off Windows Security and installed successfully.

As soon as the installer completed I turned Windows Security back on.

As a precaution I did a a virus and malware scan afterwards.

We have told Microsoft about how their software has detected a problem in our installer, that doesn’t really exist. Hopefully they will improve their detection, I don’t think we have to alter anything in order to work around the defect in their software.

What Paul said makes sense.

1 Like

Just the same problem. Tried to download straight from inside Sketchup and also from sketchup/download/all, the same results. I’ll try now deactivate Windows Security, let’s see what happens.

Same problem here. Impossible to install Sketchup due to the Trojan detection.

Did you read what I did above.

BTW – your profile says you are using SketchUp Free…

I have been using Sketchup free for year, but I decided to try the pro version last week. This is why I download it a couple of days ago.
I have read what you wrote (and already considered disabling Windows Security). But I’m not sure I want to do that. How can we be sure that it is a false positive?
How to be sure that the Sketchup servers have not been hacked?

1 Like

I guess you have to decide whether you trust the SketchUp employees.

It’s not in their best interest to mislead you and others have reported there’s been no problems with the installer.

Dude the installer is giving a sha miss, you have been compromised!

According to your profile you’re using sketchup on MacOS, this problem is just for windows users, sketchup installs without issues on Mac.