Trojan security risk originating in only office recovery file

[jausten]

Hi,

I downloaded only office from the ONLYOFFICE website and using it since about 4 month and never had any problems.
App-Version: 9.1.0.167 (x64 exe)
System: Windows 11

Now Avira flags the following file as TR/SNH!

File path was: C:\users\myname\AppData\Local\ONLYOFFICE\DesktopEditors\data\recover\DE_F4CF\changes\changes0.json

Its about the same Problem as in the following community discussion.

A trojan security risk that appears to originate inside only office software

Report a bug / security issue OS version: MacOS Sequoia 15.5 (24F74). Up to date with all patches. App version: 8.3.3 Downloaded from: ONLYOFFICE website. Normal install process. Additional information: been running Only Office for several months, very impressed with the product. While editing a document this afternoon, I received a warning about a trojan security risk “We moved changesO.json to Quarantine because it was infected with Script:SNH-gen [Trj].” which seems to originate somewh…

Sadly the duscission just ended without any results.

Is there any information, this might be a false positive, do you have any insights, or any more cases, as there is not much about it in open forums.

As cases like this really undercut the trust in the programm, I would be quite glad if you have any reasurance for that matter.

Thanks in advance!

[Constantine]

Hello @jausten

Please do not post duplicate replies. We will respond in the respective topic as soon as possible.
Closing this topic as duplicate.