Virus detected in .22 by Windows Defender?

Bug
1

Windows defender is reporting a virus in the Windows download - hopefully the screenshot comes through here. Detects Trojan:Win32/Wacatac.H!ml

containerfile: C:\Users\cmcne\Downloads\vikunja-v0.22.0-windows-4.0-amd64.exe-full.zip
file: C:\Users\cmcne\Downloads\vikunja-v0.22.0-windows-4.0-amd64.exe-full.zip->vikunja-v0.22.0-windows-4.0-amd64.exe
webfile: C:\Users\cmcne\Downloads\vikunja-v0.22.0-windows-4.0-amd64.exe-full.zip|https://dl.vikunja.io/api/0.22.0/vikunja-v0.22.0-windows-4.0-amd64.exe-full.zip|pid:7192,ProcessStart:133476389458457222

virus
virus1098×854 24.1 KB

2

Virus total confirms it: VirusTotal

I’d suspect this to be a false positive. Searching for the detections suggests this has something to do with the compression we’re using.
You should verify the pgp signature to be sure you’re using the binary from the ci and not one modified by a third party. Or build it from source to be extra sure.

1 Like