M$ Antivirus found Trojan in UCCNC

[m_c]

Which is why I'm never going back to Windows 10!!!! which I assume you were running?

Yes, but I quite like Windows 10 now, and it was the only option when I ordered my new laptop. I did opt for Pro though as it gives you more control over things.

I've got it on my milling machine with a touchscreen, and I find it far better than 7 or 8 with a touchscreen, but that machine only gets internet connection when it really needs connected, which is the same for all my machines.

[A_Camera]

Apparently it is a false alert generated by some anti virus software. Confirmed by CNC Drive as well. Balázs contacted those companies, including MS. Until further we have to add an exclusion.

[A_Camera]

UCCNC 1.2049 was released. It seems that the problem is fixed by this new release.

[driftspin]

UCCNC 1.2049 was released. It seems that the problem is fixed by this new release.

Ah ok thank you... ill check in for the update soon.

Need to find some time though. :-)

Grtz Bert.






Verstuurd vanaf mijn SM-A320FL met Tapatalk

[karangetang]

i had the same problem I acepted the virus ,, Laptop is still working ..
I informed Balasz

[Tom J]

Why I bother with that, was happily used mach3

https://www.virustotal.com/gui/file/...9a8f/detection

[magicniner]

False positives are fairly common from the AV companies which are focussed on mainstream and too lazy to react quickly to reports from smaller software publishers.
Microsoft being less than pro-active here is no surprize at all, they have your money and that's their primary concern!

[JAZZCNC]

Ok, when I saw this post it concerned me so I reached out to Balazs who owns CNCDrive to get the official word on this and here is his reply. I did ask his permission to post this which he agreed needed to be published to stop any worries people may have, so here goes.

Hi Dean,


Thank you for the information.


As you can see from the Virustotal report basically all large antivirus softwares report the file negative to viruses and 3 small virus companies reports it malicious and "confused".
Which is true, the UCCNC.exe file is Obfuscated with a software called "Confuser" for anti-cracking protection.
This is why some antivirus softwares sees it suspicious, because they cannot look into the file properly as the code is obfuscated.


And earlier it was worse, because we packaged the motion control native dll API into the UCCNC exe file which is also suspicious to antivirus softwares.
Then there were about 20-25 false positive reports on the Virustotal site, the worst was that the largest companies also reported false positive including The Windows Defender.
Funny thing is that it was not suspicious for any antivirus for years and with a blink of an eye the same became suspicious to them. :)
It is false positive (we even sent the file to the Microsoft antivirus team and they checked and confirmed that it is false positive), but as it caused issues to customers we unpackaged the native API dll from the UCCNC.exe in the next UCCNC release and made changes in the file structure.
So, now only some small not important virus companies report it false positive and the large ones like Avast and Windows Defender etc. see that the file is clean.


What we could do to make the file look fully clean to all antivirus softwares is if we would not obfuscate it, but we will not do that, because then the software would become very vurnable to crackers. :(
We think that it is good enough that 99% of the antivirus companies report it nagative and that 1% whos software reports it false positive are small antivirus companies with very small market share, so...


Thank you.


Best Regards, Balazs

[AndyGuid]

False positives are fairly common from the AV companies which are focussed on mainstream and too lazy to react quickly to reports from smaller software publishers.
Microsoft being less than pro-active here is no surprize at all, they have your money and that's their primary concern!

Agree! I've had some excellent virus free software, that simulates mainframe editing on PC for dinosaurs, incurring false positives from on these sites.