Oxygen Basic

Programming => Problems & Solutions => Topic started by: jcfuller on March 23, 2018, 01:11:58 AM

Title: Trojan detected
Post by: jcfuller on March 23, 2018, 01:11:58 AM

Charles,
  Latest OxygenBasicProgress.zip flagged  by Defender.

James

Title: Re: Trojan detected
Post by: Arnold on March 23, 2018, 03:26:21 AM

Hi James,

I suspect this results because UPX is used for some files. Checking with Virustotal I got these reports:
OxygenProgress.zip: 0 / 61
OxygenBasicProgress.zip: 3 / 54 - Avira, Cylance, Ikarus

Avira drives me nuts. I am tempted to get the full version.

Roland

Title: Re: Trojan detected
Post by: Charles Pegge on March 23, 2018, 03:28:15 AM

Thanks, James

I have submitted it to Microsoft Defender as false positive.

My Windows 10 PC also uses Defender, and I started noticing unusual delays when O2 compiles binaries. Also when the binaries are first executed. (this is over the last 3 days or so)

Title: Re: Trojan detected
Post by: Aurel on March 23, 2018, 03:58:33 AM

My Kaspersky not detect anything
on 32bit win7

Quote

and I started noticing unusual delays when O2 compiles binary

i see same thing but then i figured that AV check compilation.

Title: Re: Trojan detected
Post by: jcfuller on March 23, 2018, 04:46:11 AM

Charles,
  Make sure you post when it is corrected as I can't override.
On to other endeavors!

James

Title: Re: Trojan detected
Post by: jcfuller on March 23, 2018, 05:56:39 AM

Charles,
  Well that was fast. Do you have connections at Microsoft ? :)
Seems fine now with the download and no changes ( that I know of) on my end.

James

Title: Re: Trojan detected
Post by: Charles Pegge on March 23, 2018, 06:12:22 AM

A quick response indeed!

Perhaps you had a transient rogue Defender update. We have very little control. ( I had a bad video driver update that distorted all my OpenGls. After 3 months the problem went away. )

Quote

File submission received - submission ID 3c350168-e0e7-4666-8b61-9032df100e4b
23/03/2018 - 11:23

The file submitted for malware analysis has been added to the queue. Depending on the prevalence of the file and its potential impact, we will prioritize its analysis appropriately.

Keep this email for future reference. Visit the Windows Defender Security Intelligence portal to check the status of your submission.

Thank you,


---->
23/03/2018 - 12:00

View your submission

For determination details and concerns about the results, view the submission in the Windows Defender Security Intelligence portal. This case is considered closed.

If you are responding to this email, ensure that the submission ID is clearly indicated. We are unable to guarantee a response to email inquiries. For product assistance and any inquiries unrelated to submitting files for analysis, contact Microsoft Support.

Thank you,

The Windows Defender Security Intelligence Team

https://www.microsoft.com/en-us/wdsi/antimalware-support/malware-and-unwanted-software-evaluation-criteria

Title: Re: Trojan detected
Post by: Mike Lobanovsky on March 23, 2018, 09:23:32 AM

Quote from: jcfuller on March 23, 2018, 05:56:39 AM

Do you have connections at Microsoft ? :)

They are learning things from here. ;)