Jar files quarantined by Anti-virus on MacOS

My anti-virus updated last night and dropped three JAR files from PhpStorm into the quarantine. Anybody aware of false positives, or something worse?

Intego Virus Barrier 10.9.96
MacOS Sequoia 15.7.5
PhpStorm 2025.2.1, build PS-252.25557.128

 

0
4 comments

Hey,

I am quite sure that these are indeed false positives from Intego Virus Barrier. I have quickly checked YouTrack for any similar recent reports, but cannot find anything yet,

However, to be on the safe side, could you please show the aforementioned files hashes (MD5, for instance), so I can compare them with the original installation?

0

Thanks for the reply Vasiliy.

I noticed today that Intego no longer has the files quarantined, even though there were no updates to the virus definitions since June 6. That's kinda weird.

 ‘md5sum’ as follows:
44f4c6ee365d0ece41d8ba99a978646f  lib/modules/intellij.libraries.lucene.common.jar
6979a40a77ada89fc3d3012a6ea0bdd6  lib/app-client.jar
2f7c132ef600ebb281bdcecd23df5d36  plugins/php-impl/lib/php.jar

0

Thank you!
Luckily, I still have the same version installed on my workstation, and the hashes look pretty much identical:

So, at least we can be sure that your installation is not compromised.

Honestly, I am not familiar with the way how Intego works, but it looks like it was overreacting a bit :)
What I would suggest doing next is to observe if these warnings/quarantine appear in the future, and if they do, contact Intego and let us know if you need any help.

Also, to be totally sure, I have dropped all three files to VirusTotal online service and no threats were detected.

 

While we are here, I would like to notice that a far more recent version of IDE is already available, and if there are no licensing restrictions for you, I personally see no reason to not update. 

0

Good stuff, thank you!

0

Please sign in to leave a comment.