My Antivirus program has warned me that LastPass is a virus/trojan/suspicious, should I be concerned?
Most modern antivirus programs today rely on a trust network to determine if a file represents a threat. As a result, despite signing all executable files we distribute using a digital certificate, every time we release a new version of our software it typically results in antivirus programs flagging it as suspicious until it is distributed to thousands of users and/or until end users update their virus definitions.
If you encounter this issue, the please follow the following steps:
- Re-download the problematic files from the LastPass Download page.
- Upload the suspicious files to Virus Total, a service that will analyze the files using dozens of the industry's top antivirus engines. Unless the results indicate that several top antivirus engines believe the files to be infected, it is likely they are safe.
- Right click on the files and select 'Properties' from the context-menu, and then choose the 'Digital Signatures' tab. Make sure the files have a valid digital signature and have been signed by 'LastPass' and if necessary, view the certificate. This will assure you that the files were created by LastPass and have not been modified by a rogue third party.
- If after the above steps you still believe that files are infected or were not created by LastPass, then please contact us at security@lastpass.com and send us the files.