# \[X\] Suspicious AVG prompts with v2.73 installer

**URL:** <https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523>\
**Category:** No Bugs\
**Created:** [January 2, 2016, 8:39pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523 "2016-01-02T20:39:45Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Daryl](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/d/87869e/32.png) [@Daryl](https://community.mp3tag.de/u/Daryl)\
**Post date:** [January 2, 2016, 8:39pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/1 "2016-01-02T20:39:45Z")

</div>

I just downloaded mp3tagv273setup.exe from this website. When I run the installer it tries to open many different system processes (antivirus, windows processes, browser, etc)(see attached image). Why does it do this? I never saw this before when installing previous releases.

![](https://community.mp3tag.de/uploads/default/original/2X/5/5522252e893b8c9bc78ec595ed6fe32b37ced694.png)

---

<div class="post-metadata">

**Author:** ![Florian](https://community.mp3tag.de/user_avatar/community.mp3tag.de/florian/32/5759_2.png) [@Florian](https://community.mp3tag.de/u/Florian)\
**Post date:** [January 2, 2016, 10:07pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/2 "2016-01-02T22:07:27Z")

</div>

Hi Daryl,

I think you've downloaded something different. Can you please use the direct link

[http://download.mp3tag.de/mp3tagv273setup.exe](http://download.mp3tag.de/mp3tagv273setup.exe)

and check if it behaves correctly on your system?

Kind regards  
Florian

---

<div class="post-metadata">

**Author:** ![Daryl](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/d/87869e/32.png) [@Daryl](https://community.mp3tag.de/u/Daryl)\
**Post date:** [January 2, 2016, 10:30pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/3 "2016-01-02T22:30:44Z")

</div>

Hi Florian,  
Thanks for the quick reply.  
I downloaded directly from your link. I still got a couple zone alarm popups like the attached screen shot, but I just denied the access and it installed ok.

Then when I start Mp3tag, I get another zone alarm alert (attached).

![](https://community.mp3tag.de/uploads/default/original/2X/9/9c83041864e39520174c25eee601f0be01c38f1a.png)

---

<div class="post-metadata">

**Author:** ![mjcm](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/m/9d8465/32.png) [@mjcm](https://community.mp3tag.de/u/mjcm)\
**Post date:** [January 3, 2016, 1:29am UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/4 "2016-01-03T01:29:17Z")

</div>

It's normal that Mp3tag opens a Webpage (only one time) after install. (Sorry I forgot the page it opens maybe another member can link the correct webpage ?)

So it's correct that your Security Product warns you but my guess you have set it "Paranoid" 😃 maybe enable "Learning Mode" if your AV solution has it ?

If you don't trust a program, upload it to Virustotal and let it check with more then 50 AV solutions.

Link: [https://www.virustotal.com/](https://www.virustotal.com/)

Ps: Here the analysis for Mp3tag273setup.exe (downloaded from THIS site)

[https://www.virustotal.com/en/file/0be04516...sis/1451788085/](https://www.virustotal.com/en/file/0be04516ba4f4eac6d27c33c6a6a842f2361ac8486ee1c2df8ab8a0a9afeefea/analysis/1451788085/)

Edit: A Personal request to Florian would be to list the SHA1 Checksum of the installer on the Download page, so after Download you can compare it. 🙂

---

<div class="post-metadata">

**Author:** ![Florian](https://community.mp3tag.de/user_avatar/community.mp3tag.de/florian/32/5759_2.png) [@Florian](https://community.mp3tag.de/u/Florian)\
**Post date:** [January 3, 2016, 11:12am UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/5 "2016-01-03T11:12:26Z")

</div>

> [@Mike\_nl](#):
>
> Edit: A Personal request to Florian would be to list the SHA1 Checksum of the installer on the Download page, so after Download you can compare it. 🙂

The installer and the actual program file are signed with a code signing certificate. You can press [Alt+Enter] on the file in Windows Explorer and check the digital signatures.

I went through a long process with the certification authority to verify my identity before getting this code signing certificate. In my view, it's currently the only reliable means to really know whether the file downloaded is the correct file.

Kind regards  
Florian

---

<div class="post-metadata">

**Author:** ![Daryl](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/d/87869e/32.png) [@Daryl](https://community.mp3tag.de/u/Daryl)\
**Post date:** [January 3, 2016, 11:25am UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/6 "2016-01-03T11:25:04Z")

</div>

@Mike\_nl,  
Thanks. Yes, accessing firefox to display a "install succeeded" web page makes sense. I do trust the mp3tag authors. But I still wonder why the installer is opening the AVG antivirus process and other systems processes. In any case, I installed 273 and it's working fine. We'll see what 274 brings. 🙂

PS. Mp3Tag is a Great app. My Thanks to the authors.

---

<div class="post-metadata">

**Author:** ![Florian](https://community.mp3tag.de/user_avatar/community.mp3tag.de/florian/32/5759_2.png) [@Florian](https://community.mp3tag.de/u/Florian)\
**Post date:** [January 3, 2016, 11:46am UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/7 "2016-01-03T11:46:36Z")

</div>

> [@Daryl](#):
>
> But I still wonder why the installer is opening the AVG antivirus process and other systems processes.

Have you checked the digital signature using the steps I've described above?

FYI, the web page that is displayed after successfully installing Mp3tag is a local HTML file from Mp3tag's help system which highlights the latest changes. For your reference, this file is also available online at [https://docs.mp3tag.de/getting-started/release-notes](https://docs.mp3tag.de/getting-started/release-notes)

Kind regards  
Florian

---

<div class="post-metadata">

**Author:** ![Daryl](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/d/87869e/32.png) [@Daryl](https://community.mp3tag.de/u/Daryl)\
**Post date:** [January 3, 2016, 11:02pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/8 "2016-01-03T23:02:54Z")

</div>

@Florian,  
Yes, I just checked the signed certificate on the downloaded installer file. It is correct.

I uninstalled then reinstalled v273. When I ran the installer with Run-As-Administrator, there are no Zone Alarm alerts.

I guess my original problem is that I did not install with Run-As-Administrator privilege. My mistake.

Thanks again for your help.

---

<div class="post-metadata">

**Author:** ![mjcm](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/m/9d8465/32.png) [@mjcm](https://community.mp3tag.de/u/mjcm)\
**Post date:** [January 4, 2016, 2:11am UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/9 "2016-01-04T02:11:03Z")

</div>

> [@Florian](#):
>
> The installer and the actual program file are signed with a code signing certificate. You can press [Alt+Enter] on the file in Windows Explorer and check the digital signatures.
> 
> I went through a long process with the certification authority to verify my identity before getting this code signing certificate. In my view, it's currently the only reliable means to really know whether the file downloaded is the correct file.
> 
> Kind regards  
> Florian

You are 100% correct, sorry that I forgot that ![:huh:](https://community.mp3tag.de/uploads/default/original/1X/f15ee73c0fd9ec3b0db7481f0558638f8ee224ce.gif ":huh:")

---

<div class="post-metadata">

**Author:** ![Florian](https://community.mp3tag.de/user_avatar/community.mp3tag.de/florian/32/5759_2.png) [@Florian](https://community.mp3tag.de/u/Florian)\
**Post date:** [December 28, 2018, 2:37pm UTC](https://community.mp3tag.de/t/x-suspicious-avg-prompts-with-v2-73-installer/17523/10 "2018-12-28T14:37:39Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
