wsjt-devel

[wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Sam S. <wb...@gm...>]

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
said "This program is dangerous and executes commands from an attacker."

-- 
73,
-Sam
 WB6RJH

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Adrian <vk...@gm...>]

That is devastating, let us all beware !

On 14/1/25 14:40, Sam Sjogren via wsjt-devel wrote:
> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from 
> SourceForge on a Win10 system. Chrome said a virus was detected. A 
> Windows Defender scan showed the file infected 
> with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and 
> executes commands from an attacker."
>
> -- 
> 73,
> -Sam
>  WB6RJH
>
>
>
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Black M. <mdb...@ya...>]

It's not devastating...it's a false alarm.

Mike W9MDB







On Monday, January 13, 2025 at 11:06:18 PM CST, Adrian via wsjt-devel <wsj...@li...> wrote: 






That is devastating, let us all beware !


On 14/1/25 14:40, Sam Sjogren via wsjt-devel wrote:


>  

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."



-- 




73,

-Sam

 WB6RJH










_______________________________________________
wsjt-devel mailing list
wsj...@li...
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

_______________________________________________
wsjt-devel mailing list
wsj...@li...
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Charles S. <g3...@gm...>]

Adding to Mike's comment, I suggest looking at this article.  Note the
recommendation to submit the file (or URL) for further analysis by your AV
provider.

https://learn.microsoft.com/en-us/defender-endpoint/defender-endpoint-false-positives-negatives

73

Charlie DL3WDG





On Tue, 14 Jan 2025 at 06:06, Adrian via wsjt-devel <
wsj...@li...> wrote:

> That is devastating, let us all beware !
> On 14/1/25 14:40, Sam Sjogren via wsjt-devel wrote:
>
> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
> said "This program is dangerous and executes commands from an attacker."
>
> --
> 73,
> -Sam
>  WB6RJH
>
>
>
> _______________________________________________
> wsjt-devel mailing lis...@li...https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Wolfgang <oe...@gm...>]

Yes, unfortunately... all of the RC8 files,  std. or 'improved' giving Virus entries, checked at https://www.virustotal.com/gui/home/upload
 
Btw., my Firefox during download and Windows 10 Defender during installation and operation did not give any alarm... strange (?)
 
73 de Wolfgang
OE1MWW
 


Tuesday, January 14, 2025, 5:40:18 AM, you wrote:

> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."


----------
under construction: https://www.oe1mww.work/

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Reino T. <rei...@ko...>]

Wolfgang, it seems that Firefox learns quite fast that a file safe or a virus detection is false. Now using it I don’t get any download warnings on wsjt-x rc8 or rc8 improved.

 

73, Reino OH3mA

 

From: Wolfgang via wsjt-devel <wsj...@li...> 
Sent: Tuesday, January 14, 2025 9:39 AM
To: WSJT software development <wsj...@li...>
Cc: Wolfgang <oe...@gm...>
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

 

Yes, unfortunately... all of the RC8 files,  std. or 'improved' giving Virus entries, checked at https://www.virustotal.com/gui/home/upload

 

Btw., my Firefox during download and Windows 10 Defender during installation and operation did not give any alarm... strange (?)

 

73 de Wolfgang

OE1MWW

 

 

 

Tuesday, January 14, 2025, 5:40:18 AM, you wrote:

 

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."

 

-- 

73,

-Sam

 WB6RJH

 

 

----------

under construction: https://www.oe1mww.work/

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Charles S. <g3...@gm...>]

Wolfgang

Probably your AV tools did not flag a false positive.

 If you look at the results from Virus Total, only a few indicate a
positive.  And, the ones they find are not the same!  Other programs I use
also show the occasional false positive.

73

Charlie DL3WDG



On Tue, 14 Jan 2025 at 08:43, Wolfgang via wsjt-devel <
wsj...@li...> wrote:

> Yes, unfortunately... all of the RC8 files,  std. or 'improved' giving
> Virus entries, checked at https://www.virustotal.com/gui/home/upload
>
>
>
> Btw., my Firefox during download and Windows 10 Defender during
> installation and operation did not give any alarm... strange (?)
>
>
>
> 73 de Wolfgang
>
> OE1MWW
>
>
>
>
>
> Tuesday, January 14, 2025, 5:40:18 AM, you wrote:
>
>
> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
> said "This program is dangerous and executes commands from an attacker."
>
> --
> 73,
> -Sam
>  WB6RJH
>
>
>
> ----------
>
> under construction: https://www.oe1mww.work/
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Reino T. <rei...@ko...>]

Charlie, each virus checked has named the same detection differently. There is no “standard” on the virus names. Only the main functionality can be the same such as Troyan.

 

73, Reino OH3mA

 

From: Charles Suckling via wsjt-devel <wsj...@li...> 
Sent: Tuesday, January 14, 2025 10:30 AM
To: Wolfgang <oe...@gm...>; WSJT software development <wsj...@li...>
Cc: Charles Suckling <g3...@gm...>
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

 

Wolfgang

 

Probably your AV tools did not flag a false positive. 

 

 If you look at the results from Virus Total, only a few indicate a positive.  And, the ones they find are not the same!  Other programs I use also show the occasional false positive.  

 

73

 

Charlie DL3WDG

 

 

 

On Tue, 14 Jan 2025 at 08:43, Wolfgang via wsjt-devel <wsj...@li... <mailto:wsj...@li...> > wrote:

Yes, unfortunately... all of the RC8 files,  std. or 'improved' giving Virus entries, checked at https://www.virustotal.com/gui/home/upload

 

Btw., my Firefox during download and Windows 10 Defender during installation and operation did not give any alarm... strange (?)

 

73 de Wolfgang

OE1MWW

 

 

 

Tuesday, January 14, 2025, 5:40:18 AM, you wrote:

 

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."

 

-- 

73,

-Sam

 WB6RJH

 

 

----------

under construction: https://www.oe1mww.work/

_______________________________________________
wsjt-devel mailing list
wsj...@li... <mailto:wsj...@li...> 
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Wolfgang <oe...@gm...>]

Hello Charlie,

by the way, I rely entirely on the Defender in Windows 10 - and it hasn't reported anything. 
So, it was never an issue for me. I only did the uplaod to virustotal because of the message 
from Sam WB6RJH. 
 
As always, “feared to death is also dead” applies here too. Common sense must always be 
taken into account in these matters. We assume and can be sure that the WSJT-X team 
does not produce a virus slingshot. So, these messages are just a coincidental match of the 
same bit-patterns.
 

73 de Wolfgang
OE1MWW
 

Tuesday, January 14, 2025, 9:30:22 AM, you wrote:

> Wolfgang

> Probably your AV tools did not flag a false positive. 

>  If you look at the results from Virus Total, only a few indicate a positive.  And, the ones they find are not the same!  Other programs I use also show the occasional false positive.  

> 73

> Charlie DL3WDG

----------
under construction: https://www.oe1mww.work/

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[<k2...@co...>]

I had / have the same problem.  By turning off all virus protection I was finally able to download RC8.  But when trying to install, it gives me a error “Error opening file for writing:  C:\WSJT\wsjts\bin\Qt5Core.dll”
 
I checked and the file is there and not read-only.  I tried this twice with two different browsers with identical results (Chrome and Edge).
 
Any ideas???
 
73, Russ – K2TXB
 
 
 
From: Charles Suckling via wsjt-devel <wsj...@li...> 
Sent: Tuesday, January 14, 2025 12:28 AM
To: WSJT software development <wsj...@li...>
Cc: Charles Suckling <g3...@gm...>
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe
 
Adding to Mike's comment, I suggest looking at this article.  Note the recommendation to submit the file (or URL) for further analysis by your AV provider. 
 
https://learn.microsoft.com/en-us/defender-endpoint/defender-endpoint-false-positives-negatives
 
73
 
Charlie DL3WDG
 
 
 
 
 
On Tue, 14 Jan 2025 at 06:06, Adrian via wsjt-devel <wsj...@li... <mailto:wsj...@li...> > wrote:
That is devastating, let us all beware !
On 14/1/25 14:40, Sam Sjogren via wsjt-devel wrote:
Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."
 
-- 
73,
-Sam
 WB6RJH
 
_______________________________________________
wsjt-devel mailing list
wsj...@li... <mailto:wsj...@li...> 
https://lists.sourceforge.net/lists/listinfo/wsjt-devel
_______________________________________________
wsjt-devel mailing list
wsj...@li... <mailto:wsj...@li...> 
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[<k2...@co...>]

Answered my own question.  I renamed the WSJT-X folder and then installed the RC8 version as new.  This time the install went as expected and all is well.
 
73, Russ – K2TXB
W2DRZ Controllers, LLC.
 
 
From: k2txb--- via wsjt-devel <wsj...@li...> 
Sent: Tuesday, January 14, 2025 7:41 AM
To: 'WSJT software development' <wsj...@li...>
Cc: k2...@co...
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe
 
I had / have the same problem.  By turning off all virus protection I was finally able to download RC8.  But when trying to install, it gives me a error “Error opening file for writing:  C:\WSJT\wsjts\bin\Qt5Core.dll”
 
I checked and the file is there and not read-only.  I tried this twice with two different browsers with identical results (Chrome and Edge).
 
Any ideas???
 
73, Russ – K2TXB
 
 
 
From: Charles Suckling via wsjt-devel <wsj...@li... <mailto:wsj...@li...> > 
Sent: Tuesday, January 14, 2025 12:28 AM
To: WSJT software development <wsj...@li... <mailto:wsj...@li...> >
Cc: Charles Suckling <g3...@gm... <mailto:g3...@gm...> >
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe
 
Adding to Mike's comment, I suggest looking at this article.  Note the recommendation to submit the file (or URL) for further analysis by your AV provider. 
 
https://learn.microsoft.com/en-us/defender-endpoint/defender-endpoint-false-positives-negatives
 
73
 
Charlie DL3WDG
 
 
 
 
 
On Tue, 14 Jan 2025 at 06:06, Adrian via wsjt-devel <wsj...@li... <mailto:wsj...@li...> > wrote:
That is devastating, let us all beware !
On 14/1/25 14:40, Sam Sjogren via wsjt-devel wrote:
Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."
 
-- 
73,
-Sam
 WB6RJH
 
_______________________________________________
wsjt-devel mailing list
wsj...@li... <mailto:wsj...@li...> 
https://lists.sourceforge.net/lists/listinfo/wsjt-devel
_______________________________________________
wsjt-devel mailing list
wsj...@li... <mailto:wsj...@li...> 
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Marco C. <PY...@ou...>]

This is one of the several reasons that I prefer to use Linux and not Windows.

73 de PY1ZRJ

Inviato da Outlook per Android<https://aka.ms/AAb9ysg>
________________________________
From: Sam Sjogren via wsjt-devel <wsj...@li...>
Sent: Tuesday, January 14, 2025 1:40:18 AM
To: wsj...@li... <wsj...@li...>
Cc: Sam Sjogren <wb...@gm...>
Subject: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."

--
73,
-Sam
 WB6RJH

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Doug B. Sr. <dou...@gm...>]

Ditto. Too much drama on Windows. When I was using Windows, I used to get
viruses all the time until I turned off all the "virus protection".

Windows is the CNN of the OS world.

On Tue, Jan 14, 2025, 8:13 AM Marco Calistri via wsjt-devel <
wsj...@li...> wrote:

> This is one of the several reasons that I prefer to use Linux and not
> Windows.
>
> 73 de PY1ZRJ
>
> Inviato da Outlook per Android <https://aka.ms/AAb9ysg>
> ------------------------------
> *From:* Sam Sjogren via wsjt-devel <wsj...@li...>
> *Sent:* Tuesday, January 14, 2025 1:40:18 AM
> *To:* wsj...@li... <wsj...@li...>
> *Cc:* Sam Sjogren <wb...@gm...>
> *Subject:* [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe
>
> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
> said "This program is dangerous and executes commands from an attacker."
>
> --
> 73,
> -Sam
>  WB6RJH
>
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Hasan N. <hba...@gm...>]

Please, don't turn this into a Linux vs Windows debate, it's off topic. He
needs help with Windows, not Linux.

Hasan


On Tue, Jan 14, 2025 at 7:23 AM Doug Breault, Sr. via wsjt-devel <
wsj...@li...> wrote:

> Ditto. Too much drama on Windows. When I was using Windows, I used to get
> viruses all the time until I turned off all the "virus protection".
>
> Windows is the CNN of the OS world.
>
> On Tue, Jan 14, 2025, 8:13 AM Marco Calistri via wsjt-devel <
> wsj...@li...> wrote:
>
>> This is one of the several reasons that I prefer to use Linux and not
>> Windows.
>>
>> 73 de PY1ZRJ
>>
>> Inviato da Outlook per Android <https://aka.ms/AAb9ysg>
>> ------------------------------
>> *From:* Sam Sjogren via wsjt-devel <wsj...@li...>
>> *Sent:* Tuesday, January 14, 2025 1:40:18 AM
>> *To:* wsj...@li... <wsj...@li...>
>> *Cc:* Sam Sjogren <wb...@gm...>
>> *Subject:* [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe
>>
>> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
>> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
>> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
>> said "This program is dangerous and executes commands from an attacker."
>>
>> --
>> 73,
>> -Sam
>>  WB6RJH
>>
>> _______________________________________________
>> wsjt-devel mailing list
>> wsj...@li...
>> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>>
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Marco C. <PY...@ou...>]

Yes, I see.

But he received already the answers he needs: mostly false positive warning by Windows antivirus.

Regards,

PY1ZRJ



Inviato da Outlook per Android<https://aka.ms/AAb9ysg>
________________________________
From: Hasan N0AN via wsjt-devel <wsj...@li...>
Sent: Tuesday, January 14, 2025 10:37:54 AM
To: WSJT software development <wsj...@li...>
Cc: Hasan N0AN <hba...@gm...>
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

Please, don't turn this into a Linux vs Windows debate, it's off topic. He needs help with Windows, not Linux.

Hasan


On Tue, Jan 14, 2025 at 7:23 AM Doug Breault, Sr. via wsjt-devel <wsj...@li...<mailto:wsj...@li...>> wrote:

Ditto. Too much drama on Windows. When I was using Windows, I used to get viruses all the time until I turned off all the "virus protection".

Windows is the CNN of the OS world.

On Tue, Jan 14, 2025, 8:13 AM Marco Calistri via wsjt-devel <wsj...@li...<mailto:wsj...@li...>> wrote:
This is one of the several reasons that I prefer to use Linux and not Windows.

73 de PY1ZRJ

Inviato da Outlook per Android<https://aka.ms/AAb9ysg>
________________________________
From: Sam Sjogren via wsjt-devel <wsj...@li...<mailto:wsj...@li...>>
Sent: Tuesday, January 14, 2025 1:40:18 AM
To: wsj...@li...<mailto:wsj...@li...> <wsj...@li...<mailto:wsj...@li...>>
Cc: Sam Sjogren <wb...@gm...<mailto:wb...@gm...>>
Subject: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."

--
73,
-Sam
 WB6RJH

_______________________________________________
wsjt-devel mailing list
wsj...@li...<mailto:wsj...@li...>
https://lists.sourceforge.net/lists/listinfo/wsjt-devel
_______________________________________________
wsjt-devel mailing list
wsj...@li...<mailto:wsj...@li...>
https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[DG2YCB <DG...@gm...>]

Hi Sam and all,

Today I sent all four RC8 Windows 64-bit installation files (WSJT-X and
wsjt-x_improved) to Microsoft for analysis. Last time it took about 3 days
for the files to be confirmed as virus-free and for the virus scanner
signature to be updated. But once again: You can (and should) do this
yourself in such cases. The installers I have created have never contained
any viruses. My computer is strictly monitored in this respect; and
SourceForge also tests every file again.

73 de DG2YCB,
Uwe
_________________________________________
German Amateur Radio Station DG2YCB
Dr. Uwe Risse
eMail: DG...@gm...
Info: www.qrz.com/db/DG2YCB

Am 14. Januar 2025 05:41:37 schrieb Sam Sjogren via wsjt-devel
<wsj...@li...>:
> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
> said "This program is dangerous and executes commands from an attacker."
>
> --
> 73,
> -Sam
> WB6RJH
>
> _______________________________________________
> wsjt-devel mailing list
> wsj...@li...
> https://lists.sourceforge.net/lists/listinfo/wsjt-devel

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Sam S. <wb...@gm...>]

Uwe et.al.,

Thank you for submitting the files to Microsoft. I've not encountered a
false positive like this before, I will know what to do in the future. And
I appreciate your reassurance in the preventative measures in place. I'll
check again in a few days after the virus signature files get update. Btw,
I note that Firefox doesn't flag the download as infected even though
Chrome does.

As for comments from others, I don't think that OSes other than Windows are
inherently completely secure (note the XZ compression library breach, just
for one case) nor do I think it generally is a good idea to turn off virus
protection. As for me, I'm retired from development, including security
software, and am just going to flag these sorts of warnings (and in the
future submit the cases to Microsoft).  I do use various other operating
systems, but for a lot of use cases Windows does the job that I want it to
even if those systems are outnumbered by Linux and macOS systems for other
uses and users in my home/lab technomenagerie.

73,
-Sam
 WB6RJH

On Tue, Jan 14, 2025 at 9:08 AM DG2YCB <DG...@gm...> wrote:

> Hi Sam and all,
>
> Today I sent all four RC8 Windows 64-bit installation files (WSJT-X and
> wsjt-x_improved) to Microsoft for analysis. Last time it took about 3 days
> for the files to be confirmed as virus-free and for the virus scanner
> signature to be updated. But once again: You can (and should) do this
> yourself in such cases. The installers I have created have never contained
> any viruses. My computer is strictly monitored in this respect; and
> SourceForge also tests every file again.
>
> 73 de DG2YCB,
> Uwe
> _________________________________________
> German Amateur Radio Station DG2YCB
> Dr. Uwe Risse
> eMail: DG...@gm...
> Info: www.qrz.com/db/DG2YCB
>
>
> Am 14. Januar 2025 05:41:37 schrieb Sam Sjogren via wsjt-devel <
> wsj...@li...>:
>
>> Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from
>> SourceForge on a Win10 system. Chrome said a virus was detected. A Windows
>> Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and
>> said "This program is dangerous and executes commands from an attacker."
>>
>> --
>> 73,
>> -Sam
>>  WB6RJH
>>
>> _______________________________________________
>> wsjt-devel mailing list
>> wsj...@li...
>> https://lists.sourceforge.net/lists/listinfo/wsjt-devel
>>
>>
>

-- 
73,
-Sam
 WB6RJH

Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

[Marco C. <PY...@ou...>]

I agree with you Sam, WB6RJH.

Attackers nowadays are so dangerously skilled, that potentially can infect every OS.

The point is that Windowa is (most likely) still the most used OS in the world, for this reason is the most attacked too.

73 de PY1ZRJ

Inviato da Outlook per Android<https://aka.ms/AAb9ysg>
________________________________
From: Sam Sjogren via wsjt-devel <wsj...@li...>
Sent: Tuesday, January 14, 2025 3:57:30 PM
To: DG2YCB <DG...@gm...>
Cc: Sam Sjogren <wb...@gm...>; WSJT software development <wsj...@li...>
Subject: Re: [wsjt-devel] virus found in wsjtx-2.7.0-rc8-win64.exe

Uwe et.al<http://et.al>.,

Thank you for submitting the files to Microsoft. I've not encountered a false positive like this before, I will know what to do in the future. And I appreciate your reassurance in the preventative measures in place. I'll check again in a few days after the virus signature files get update. Btw, I note that Firefox doesn't flag the download as infected even though Chrome does.

As for comments from others, I don't think that OSes other than Windows are inherently completely secure (note the XZ compression library breach, just for one case) nor do I think it generally is a good idea to turn off virus protection. As for me, I'm retired from development, including security software, and am just going to flag these sorts of warnings (and in the future submit the cases to Microsoft).  I do use various other operating systems, but for a lot of use cases Windows does the job that I want it to even if those systems are outnumbered by Linux and macOS systems for other uses and users in my home/lab technomenagerie.

73,
-Sam
 WB6RJH

On Tue, Jan 14, 2025 at 9:08 AM DG2YCB <DG...@gm...<mailto:DG...@gm...>> wrote:
Hi Sam and all,

Today I sent all four RC8 Windows 64-bit installation files (WSJT-X and wsjt-x_improved) to Microsoft for analysis. Last time it took about 3 days for the files to be confirmed as virus-free and for the virus scanner signature to be updated. But once again: You can (and should) do this yourself in such cases. The installers I have created have never contained any viruses. My computer is strictly monitored in this respect; and SourceForge also tests every file again.

73 de DG2YCB,
Uwe
_________________________________________
German Amateur Radio Station DG2YCB
Dr. Uwe Risse
eMail: DG...@gm...<mailto:DG...@gm...>
Info: www.qrz.com/db/DG2YCB<http://www.qrz.com/db/DG2YCB>



Am 14. Januar 2025 05:41:37 schrieb Sam Sjogren via wsjt-devel <wsj...@li...<mailto:wsj...@li...>>:

Earlier this evening I downloaded wsjtx-2.7.0-rc8-win64.exe from SourceForge on a Win10 system. Chrome said a virus was detected. A Windows Defender scan showed the file infected with Trojan:Win32/Wacatac.B!ml and said "This program is dangerous and executes commands from an attacker."

--
73,
-Sam
 WB6RJH

_______________________________________________
wsjt-devel mailing list
wsj...@li...<mailto:wsjt-devel%40lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/wsjt-devel




--
73,
-Sam
 WB6RJH