Virus Detected with AI Exe

[Frank Bastiaens]

Hi,

I get a message via Defender that a AI created executable is a Virus. (Windows Defender)

Name: Trojan:Win32/Wacatac.B!ml
Alert Level: Severe
Category: Trojan
Details: This program is dangerous and executes commands from an attacker.

Kind Regards

PS, Attached the AIP

[Catalin]

Hello Frank,

Most likely, that happens because you did not digitally sign your setup.

What is a Code Signing Certificate and how to ensure digital trust for your application

Hope this helps!

Best regards,
Catalin

[Frank Bastiaens]

Hi Catalin,

You would think so, but then this should already happen 2 weeks ago when I created this package for the first time.

Kind Regards.

[Catalin]

Hello Frank,

I can assure you this is because your setup is not digitally signed (I've had many users in the same scenario and the detection went off after the setup was signed).

And I also can assure you that this is a false-positive detection. If you'd like, you can submit it for whitelisting to Microsoft:

Submit a file for malware analysis

Hope this helps!

Best regards,
Catalin

[CliftonJones]

Hello Frank,

Most likely, that happens because you did not digitally sign your setup.

What is a Code Signing Certificate and how to ensure digital trust for your application

Hope this helps!

Best regards,
Catalin

Thank you sir for the link, I will try it and I hope it will work. If I want to know more, I will message you or will start my own thread.

[Catalin]

Hello and welcome to our forums,

You're always welcome!

And sure, let me know if you got any questions.

Best regards,
Catalin

[JGwinner]

I know what code signing is, but some guidance on how to include that with Advanced Installer would really be helpfull

Especially as without this, AI basically won't work at all. You have no idea how many angry phone calls we got that our software is virus riddled.

== John ==