Charmed Quark Systems, Ltd. - Support Forums and Community
5.5 Beta Discussions Thread - Printable Version

+- Charmed Quark Systems, Ltd. - Support Forums and Community (https://www.charmedquark.com/vb_forums)
+-- Forum: General Discussion (https://www.charmedquark.com/vb_forums/forumdisplay.php?fid=3)
+--- Forum: Beta Discussions (https://www.charmedquark.com/vb_forums/forumdisplay.php?fid=12)
+--- Thread: 5.5 Beta Discussions Thread (/showthread.php?tid=10858)

Pages: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30


RE: 5.5 Beta Discussions Thread - kfly - 03-28-2020

Some more info. Looks like windows defender pattern  issue. As older packages that were downloaded just fine are now showing issues.


Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Fuery.C!cl&threatid=2147718736&enterprise=0
Name: Trojan:Win32/Fuery.C!cl
ID: 2147718736
Severity: Severe
Category: Trojan
Path: file:_C:\temp\CQCInstSE_5_4_911 (1).exe; webfile:_C:\temp\CQCInstSE_5_4_911 (1).exe|https://www.charmedquark.com/Web2/Downloads/Installers/Beta/CQCInstSE_5_4_911.exe|pid:12256,ProcessStart:132298769728351464
Detection Origin: Internet
Detection Type: FastPath
Detection Source: Downloads and attachments
User: CQC-PC\CQC
Process Name: Unknown
Security intelligence Version: AV: 1.313.260.0, AS: 1.313.260.0, NIS: 1.313.260.0
Engine Version: AM: 1.1.16900.4, NIS: 1.1.16900.4


RE: 5.5 Beta Discussions Thread - kfly - 03-28-2020

Dean,
Everything I download out of the Beta directory gives me Virus detected for both chrome and moving within file manager windows.
5_4_911  all way back to 5_3......

https://www.charmedquark.com/Web2/Downloads/Installers/Beta/CQCInstSE_5_4_911.exe


But looks like everything out of the Installers directory is good. 
http://www.charmedquark.com/web2/Downloads/Installers/CQCInstSE_5_4_0.exe

maybe worth a try moving 5_4_911.exe to the installers directory and see if it is downloadable. Maybe a path thing? or where it is hosted? assume you updated your windows defender to "Security intelligence version 1.313.271.0" or later to test. seems there was also a windows defender update yesterday on my systems.


Thanks 
Kevin


RE: 5.5 Beta Discussions Thread - Dean Roddey - 03-28-2020

I'm current on Windows Updates. 5.3 is a long time ago (Sept 2018), so why would those all suddenly start triggering? I'm guessing they all have some byte sequence which the virus check was just updated to check for and now they are triggering. Otherwise, how would no one since all the way back to 5.3 not have gotten any warnings?


RE: 5.5 Beta Discussions Thread - Dean Roddey - 03-28-2020

I moved a copy of .914 up to the Installers directory. Try that and see if it makes a difference.


RE: 5.5 Beta Discussions Thread - kfly - 03-28-2020

(03-28-2020, 08:01 AM)Dean Roddey Wrote: I moved a copy of .914 up to the Installers directory. Try that and see if it makes a difference.

Nope failed
http://www.charmedquark.com/web2/Downloads/Installers/CQCInstSE_5_4_914.exe


ok a little more info.
All Betas 5_4_909 and newer fail.

https://www.charmedquark.com/Web2/Downloads/Installers/Beta/CQCInstSE_5_4_909.exe


RE: 5.5 Beta Discussions Thread - Dean Roddey - 03-28-2020

But the 5.3.x ones are still failing as well? It makes some reasonable sense if it's just the last handful of betas since in that case it's reasonable to assume that some byte sequence has occurred at that point that is now being looked for and it's not hard to see a particular sequence surviving that long unmolested. It's harder to understand how coming from one path vs. the other or going all the way back to 5.3.x could be an issue, though of course it's possible that some byte sequence could have been there all that time.


RE: 5.5 Beta Discussions Thread - kfly - 03-28-2020

If you have windows security "Real-time protection" turned on it fails to download file.
If you turn off real time protection the file downloads fine in chrome.....

Kevin


RE: 5.5 Beta Discussions Thread - Dean Roddey - 03-28-2020

I just scanned .914 with another product called Sophos which didn't have a problem with it.


RE: 5.5 Beta Discussions Thread - kfly - 03-28-2020

(03-28-2020, 08:32 AM)Dean Roddey Wrote: I just scanned .914 with another product called Sophos which didn't have a problem with it.

yup. Malwarebytes also scans good.


RE: 5.5 Beta Discussions Thread - Dean Roddey - 03-28-2020

I guess I shouldn't have snubbed Bill Gate's dinner invitation...