Page 1 of 1

Trojan: Win32/Skeeyah.A!rfn

Posted: Tue May 30, 2017 9:03 pm
by perdrix
Windows defender just reported it found the subject Trojan in the Sharpcap (un)installer.

Items:
file:C:\ProgramData\Package Cache\{990e3ac1-5282-4d65-a082-cd836a620e7e}\SharpCapInstall.exe
regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{990e3ac1-5282-4d65-a082-cd836a620e7e}
uninstall:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{990e3ac1-5282-4d65-a082-cd836a620e7e}

I've no way to confirm this myself, but maybe you should contact MS about this?

HtH
Dave

Re: Trojan: Win32/Skeeyah.A!rfn

Posted: Tue May 30, 2017 9:07 pm
by perdrix
Web page for contact in this case is:

https://www.microsoft.com/en-us/securit ... actUS.aspx

Cheers
Dave

Re: Trojan: Win32/Skeeyah.A!rfn

Posted: Tue May 30, 2017 10:26 pm
by admin
Thanks for letting me know... I am starting to *hate* antivirus... I have reported the false +ve with Microsoft, but also taken the quicker step of rebuilding the latest version of 2.9 with a new build number and Windows Defender is quite happy with that! Shows how brilliant anti-virus is when a change in the build number is all that is needed to stop the false positive...

For reference, it's the uninstaller for 2.9.3085 that's being flagged. The actual installed application runs fine!

cheers,

Robin