M$ Antivirus found Trojan in UCCNC

[driftspin]

Hi guys,

M$ Antivirus has just now decided UCCNC.exe contains a trojan win32/Zpevdo.A


Did anyone else have this problem?

UCCNC setup is 1.2048




Verstuurd vanaf mijn SM-A320FL met Tapatalk

[JOGARA]

Upload the "UCCNC.exe" to Virus Total. https://www.virustotal.com/

How many are detecting? Link the result.


The setup.exe is showing 3 now on VT (was previously one) after I just uploaded a fresh copy.
Probably just detecting with new virus signatures.

Typically you should not worry unless a good handful of the VirusTotal detectors come up with positives.
That being said, run a full system scan and keep an eye on the host computer over the next week or so.

[driftspin]

Ok so i uploaded UCCNC.exe.

https://www.virustotal.com/nl/file/0...6138/analysis/

12/69



eh.


I downloaded from CNCDRIVE, do we need to contact Balasz?


Grtz Bert

[m_c]

It's a bit of a known problem with the MS virus checker.
Anytime a new version of something is released, it can trigger false positives.
Dynomotion's KMotionCNC suffers the same problem until it's been out for a few days, and there's event software I use, which also has the same problem when a new update is released (MS even shut the app downand sandboxed it last month mid-event, which caused me a bit of a problem!).

It's all to do with the virus checker finding features in the software that could indicate it's doing things it shouldn't. In the case of the event software, it has a lot of functionality for replicating data to servers, which I guess gets flagged as potential Malware, and in KMotionCNC I suspect it's due to containing a lot of small example programs and source code, some of which are accessing system files. I'd imagine UCNC is being flagged for similar.

[driftspin]

It's a bit of a known problem with the MS virus checker.
Anytime a new version of something is released, it can trigger false positives.
Dynomotion's KMotionCNC suffers the same problem until it's been out for a few days, and there's event software I use, which also has the same problem when a new update is released (MS even shut the app downand sandboxed it last month mid-event, which caused me a bit of a problem!).

It's all to do with the virus checker finding features in the software that could indicate it's doing things it shouldn't. In the case of the event software, it has a lot of functionality for replicating data to servers, which I guess gets flagged as potential Malware, and in KMotionCNC I suspect it's due to containing a lot of small example programs and source code, some of which are accessing system files. I'd imagine UCNC is being flagged for similar.

Yes i had the software running a few weeks now...

So why is it a problem now?

So i flagged the UCCNC directory for no scanning for now and i will check in a few days...

Grtz Bert.

Verstuurd vanaf mijn SM-A320FL met Tapatalk

[m_c]

Is it on a computer with good internet access?

In the case of the event software shutting down, I'd installed the latest version the previous evening, at which point I assume a copy had been uploaded to MS for testing. It was the next morning after getting an internet connection setup having dealt with the initial rush, all the software shut down, which I'm guessing is the point the virus checker got details about the software being infected back from MS.

It could be MS have discovered some new virus that matches something in UCNC, so it's only just being flagged. If it is a false positive it should sort itself out in a couple days and stop being flagged.

[Ger21]

Are you the same person posting this at the UCCNC forum and CNC Zone?
If not, I'd add an exclusion to Windows Defender for the UCCNC folder. I added the exclusion a long time ago, as it allows UCCNC to start faster. An added benefit is it prevents false positives.

[AndyGuid]

. . . . . . . MS even shut the app down and sandboxed it last month mid-event, which caused me a bit of a problem! . . . . . . . .

Which is why I'm never going back to Windows 10!!!! which I assume you were running?

[Ger21]

Is someone posting under driftspin elsewhere?

No, someone else.
Apparently, a lot of people are running into this.
I've had an Exclusion on my UCCNC folder for a long time, and have not had any issues on two PC's running Windows 10.

[driftspin]

Which is why I'm never going back to Windows 10!!!! which I assume you were running?

Uh.. no, no windows 10...
Not yet that is...
I dont like the extra layer off user interface windows 10 has. Afraid i cant avoid it in the long run though.

.

Fusion360 is on a desktop machine with a discrete vga card (I5 2500k 8gb ssd+ 4gb1050ti) which is working ok for me for now.

I have not made any designs yet that need better hardware.

I have a windows 7 x64 laptop to run uccnc for now
It is a HP 2nd gen i5 with 8gb memory 1tb sshd.

I want to network them but found uc300eth does not like being networked through a switch to my Fritzbox router for some reason.

I need to do some wiresharking to find out what is going on.
Every time i start uccnc the connection drops.

When i have a direct connection (not on a switch) everything is working great.

Maybe i should not network it and just have it direct connect to the laptop.

The laptop is multifunctional device for now. homework for kids diagnostic tool for my car and so on.

I am moving the kids to their own hardware... trying to claim the laptop for mancave purposes only.

Maybe ill have the laptop wifi connect to the desktop and uc300eth by wired port.


Grtz Bert.

Verstuurd vanaf mijn SM-A320FL met Tapatalk