Malware-Detected

[ADAM PAM]

Hi,

While doing a fresh install of the latest Uppaal version (4.0.15), the server.exe binary is detected as containing the trojan Fuery.B!cl (https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3aWin32%2fFuery.B!cl&threatid=2147718514).

Attached is a screenshot from my machine.

Flagging this and wondering if this is a false positive or if something has gone wrong...

Thanks in advance.

[Marius Mikučionis]

Dear Adam,

I cannot reproduce your issue: I have just updated my Windows 10 to the very latest, anti-virus updates etc, re-downloaded Uppaal 4.0.15 and everything runs fine.

I also tried scanning the disk using the default Windows malware protection tools, but it could not find anything.

Perhaps you could check if your files did not get modified somewhere along the way?

I attach a screenshot with CRC-32 sums of the files in bin-Win32 directory (you may need to add a new column "CRC-32" to see it in the zip archive).

A lighter check could be to see if the file sizes match.

(sorry for the huge screenshot, I could not make it smaller and still readable)

Best regards,

Marius

[ADAM PAM]

Hi Marius,

Thanks for the reply. I have re-downloaded (Windows Defender prompted me to purge the previous installation) and the CRCs match. I may see if I can recover the previous download and see if the CRCs are still the same. Interestingly, last night I downloaded it again and received the same alert. Today, I downloaded it and now Windows Defender does not detect a Trojan, but I have not updated or changed anything. Perhaps it was getting intercepted...

In either case, thanks for the help.

[Marius Mikučionis]

Hi,

I asked Microsoft to investigate the server.exe from uppaal-4.0.15.

They seem to have updated their "definitions", here is their reply with instructions:

Best regards,
Marius

[onsloshe...@gmail.com]

I will do that, thanks for following that up!