Posts: 745
Threads: 33
Joined: Oct 2008
Some more info. Looks like windows defender pattern issue. As older packages that were downloaded just fine are now showing issues.
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=...terprise=0
Name: Trojan:Win32/Fuery.C!cl
ID: 2147718736
Severity: Severe
Category: Trojan
Path: file:_C:\temp\CQCInstSE_5_4_911 (1).exe; webfile:_C:\temp\CQCInstSE_5_4_911 (1).exe|https://www.charmedquark.com/Web2/Downloads/Installers/Beta/CQCInstSE_5_4_911.exe|pid:12256,ProcessStart:132298769728351464
Detection Origin: Internet
Detection Type: FastPath
Detection Source: Downloads and attachments
User: CQC-PC\CQC
Process Name: Unknown
Security intelligence Version: AV: 1.313.260.0, AS: 1.313.260.0, NIS: 1.313.260.0
Engine Version: AM: 1.1.16900.4, NIS: 1.1.16900.4
_______________
Denon 3808ci, 2112ci ,Sonos, NoVo Grand Concerto, Z-Wave(Lights,Locks), Hue, SmartThings,
iPads,Tivo,Hikvision,Elk-M1,TED5000,Somfy RTS blinds+ZRTSI, Amazon Echos+Dots, Polk XRT12,
Honeywell Wi-Fi 9000, Caleo Wi-Fi Thermostats, Rainmachine
Posts: 745
Threads: 33
Joined: Oct 2008
03-28-2020, 07:16 AM
(This post was last modified: 03-28-2020, 07:20 AM by kfly.)
Dean,
Everything I download out of the Beta directory gives me Virus detected for both chrome and moving within file manager windows.
5_4_911 all way back to 5_3......
https://www.charmedquark.com/Web2/Downlo..._4_911.exe
But looks like everything out of the Installers directory is good.
http://www.charmedquark.com/web2/Downloa..._5_4_0.exe
maybe worth a try moving 5_4_911.exe to the installers directory and see if it is downloadable. Maybe a path thing? or where it is hosted? assume you updated your windows defender to "Security intelligence version 1.313.271.0" or later to test. seems there was also a windows defender update yesterday on my systems.
Thanks
Kevin
_______________
Denon 3808ci, 2112ci ,Sonos, NoVo Grand Concerto, Z-Wave(Lights,Locks), Hue, SmartThings,
iPads,Tivo,Hikvision,Elk-M1,TED5000,Somfy RTS blinds+ZRTSI, Amazon Echos+Dots, Polk XRT12,
Honeywell Wi-Fi 9000, Caleo Wi-Fi Thermostats, Rainmachine
Posts: 40,483
Threads: 491
Joined: Aug 2002
03-28-2020, 07:52 AM
(This post was last modified: 03-28-2020, 08:02 AM by Dean Roddey.)
I'm current on Windows Updates. 5.3 is a long time ago (Sept 2018), so why would those all suddenly start triggering? I'm guessing they all have some byte sequence which the virus check was just updated to check for and now they are triggering. Otherwise, how would no one since all the way back to 5.3 not have gotten any warnings?
Dean Roddey
Explorans limites defectum
Posts: 40,483
Threads: 491
Joined: Aug 2002
I moved a copy of .914 up to the Installers directory. Try that and see if it makes a difference.
Dean Roddey
Explorans limites defectum
Posts: 745
Threads: 33
Joined: Oct 2008
(03-28-2020, 08:01 AM)Dean Roddey Wrote: I moved a copy of .914 up to the Installers directory. Try that and see if it makes a difference.
Nope failed
http://www.charmedquark.com/web2/Downloads/Installers/CQCInstSE_5_4_914.exe
ok a little more info.
All Betas 5_4_909 and newer fail.
https://www.charmedquark.com/Web2/Downlo..._4_909.exe
_______________
Denon 3808ci, 2112ci ,Sonos, NoVo Grand Concerto, Z-Wave(Lights,Locks), Hue, SmartThings,
iPads,Tivo,Hikvision,Elk-M1,TED5000,Somfy RTS blinds+ZRTSI, Amazon Echos+Dots, Polk XRT12,
Honeywell Wi-Fi 9000, Caleo Wi-Fi Thermostats, Rainmachine
Posts: 40,483
Threads: 491
Joined: Aug 2002
03-28-2020, 08:20 AM
(This post was last modified: 03-28-2020, 08:21 AM by Dean Roddey.)
But the 5.3.x ones are still failing as well? It makes some reasonable sense if it's just the last handful of betas since in that case it's reasonable to assume that some byte sequence has occurred at that point that is now being looked for and it's not hard to see a particular sequence surviving that long unmolested. It's harder to understand how coming from one path vs. the other or going all the way back to 5.3.x could be an issue, though of course it's possible that some byte sequence could have been there all that time.
Dean Roddey
Explorans limites defectum
Posts: 745
Threads: 33
Joined: Oct 2008
If you have windows security "Real-time protection" turned on it fails to download file.
If you turn off real time protection the file downloads fine in chrome.....
Kevin
_______________
Denon 3808ci, 2112ci ,Sonos, NoVo Grand Concerto, Z-Wave(Lights,Locks), Hue, SmartThings,
iPads,Tivo,Hikvision,Elk-M1,TED5000,Somfy RTS blinds+ZRTSI, Amazon Echos+Dots, Polk XRT12,
Honeywell Wi-Fi 9000, Caleo Wi-Fi Thermostats, Rainmachine
Posts: 40,483
Threads: 491
Joined: Aug 2002
I just scanned .914 with another product called Sophos which didn't have a problem with it.
Dean Roddey
Explorans limites defectum
Posts: 745
Threads: 33
Joined: Oct 2008
(03-28-2020, 08:32 AM)Dean Roddey Wrote: I just scanned .914 with another product called Sophos which didn't have a problem with it.
yup. Malwarebytes also scans good.
_______________
Denon 3808ci, 2112ci ,Sonos, NoVo Grand Concerto, Z-Wave(Lights,Locks), Hue, SmartThings,
iPads,Tivo,Hikvision,Elk-M1,TED5000,Somfy RTS blinds+ZRTSI, Amazon Echos+Dots, Polk XRT12,
Honeywell Wi-Fi 9000, Caleo Wi-Fi Thermostats, Rainmachine
Posts: 40,483
Threads: 491
Joined: Aug 2002
I guess I shouldn't have snubbed Bill Gate's dinner invitation...
Dean Roddey
Explorans limites defectum
|
