[wix-users] installer reported by Windows Defender

[Stewart Lynch]

It seems that quite a few installers have been hit by this false positive.
I've submitted my installer to Microsoft's Malware Protection Centre for
rescanning. Hopefully that will sort it out.

 

 

From: Stewart Lynch [mailto:stewartlynch8 at gmail.com] 
Sent: 03 June 2016 18:15
To: 'WiX Toolset Users Mailing List' <wix-users at lists.wixtoolset.org>
Subject: installer reported by Windows Defender

 

Hi,

 

I don't know if it's a coincidence, but ever since I upgraded to Wix
v3.10.3.2924 Windows Defender is reporting my installer and removing it.

 

This is what it reports:

https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?nam
e=Trojan%3AWin32%2FFathale.B!plock
<https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?na
me=Trojan%3AWin32%2FFathale.B!plock&threatid=2147709273&enterprise=0>
&threatid=2147709273&enterprise=0

 

Obviously I've scanned my entire PC, and scanned my installer with many
other scanners and they all say its fine.

 

Has anyone else encountered this, or have any idea why Defender might have
started complaining?

 

Thanks,

 

Stewart.