Problem - Trojan/Repexit in MacroQuest Log files

[q8reflex]

Windows Defender (Windows 10 Pro) detected a SEVERE Trojan Win32/Repexit that can install malware programs without user's knowledge.

 

[dulak]

It's a false positive. That'll show up with anything that injects itself into an exe file the way that MQ2 does.

 

[wirlin]

I got a hit on a trojan in the mq compile too.

In Dsurface.exe ... called Trojan:Win32/Rundas!plock

If it's a false positive then it's the first time it's gotten a ' false positive ' in a decade...

 

[Dead]

Companies constantly update their security checks. Its still a false positive, even if you haven't had it in happen in a decade. Your security software most likely updated and decided to flag it.

 

[Redbot]

I got a hit on a trojan in the mq compile too.

In Dsurface.exe ... called Trojan:Win32/Rundas!plock

If it's a false positive then it's the first time it's gotten a ' false positive ' in a decade...

We get false positives pretty often actually. I have to send in the mq2.exe to microsoft each time. I don't care about other antivir programs so I don't send it in to them.

Each time there's a false positive I provide a method for users to create it on their own so they know we're not doing anything sneaky. Right now we're all clear in windows defender.

 

[Redbot]

Can someone tell me which file exactly is being detected as a virus? And which antivir software you're using? I'll start applying to more whitelists

 

[Covenant]

Replied to your PM but will post here as well, it's Macroquest2.exe itself, detected by Windows Defender, I should note I'm using the Test server compile too.

I don't think anyone is stupid enough to believe there's a trojan injected into it, anyone who's ever used cracks for software/games knows these things are often detected as trojans.

However, I did have to reinstall MQ since it deleted the exe, I also had to reboot my PC which anyone with a PCI-E SSD can verify takes a good 8 to 10 seconds, therefore I think I am entitled to a 2-3 year free subscription settlement for the pain and anguish this has caused.

 

[Redbot]

Thank you Fragments, submitted the test version to MMPC as well.

https://www.microsoft.com/en-us/security/portal/mmpc/default.aspx