SharpCap Forums

A few days ago, Windows Defender started to flag a Trojan in SharpCap.

Defender quarantined two files and then recommended that I let it repair the problem. It seems to have deleted files that are critical to the uninstall process. I'm stuck now and can neither uninstall the old remains or install either the same or a new 3.0 version.

Do you have any advice ?

Thanks,

Andy

Hi,

first let me say that this is not a real trojan, just Windows Defender giving a false positive because a pattern in one of the SharpCap files matches the trigger pattern for whatever this A!cl thing is.

I think that this approach should work :

Temporarily disable windows defender
Download the installer for 3.0.3994 if you don't still have the downloads
Run the installer - it should offer to uninstall for you even though some of the install files are missing
Re-enable Windows Defender
Install 3.0.4017 which doesn't seem to trigger the false positive.

please let me know if this doesn't work and I will look into it further

cheers,

Robin

Robin,

Thanks, I will give this a try tomorrow evening and then report on the results.

Andy

Hi Andy,

I tried to install 3.0.3994 last night on a machine with a fully up-to-date Windows Defender and it didn't complain. The virus definitions were brand new (2nd December) and I ran a full scan after installing and nothing was picked up. I wonder if they have corrected the problem that was causing this A!cl trojan to be falsely detected in the latest update?

cheers,

Robin

Robin,
I downloaded 3.0.3994 and tried to reinstall. Here's the error window and log file-

It looks like there are files still left over from the original installation, and the new attempt is not able to complete with those still in place.
I could just delete everything ?

Andy

Ah, it looks like the installer thinks 4016 is installed rather than 3994. I will send you the direct download link for that version via PM - try running that installer and hopefully it will have the correct effect of uninstalling for you so you can then start from scratch.

cheers,

Robin

OK, some progress. I tried to install 4017, but it popped a window about missing the .msi file.
I OK'd that message and found the progress window saying that the new version was installed.
It runs and seems to be ok. Let's call this a success. I will try it with a camera this evening and post a simple yea/nay.
Thanks,

Andy

Yea! Both cameras are working with 3.0 and 3.1. No messages from Windows Defender. It looks like a good repair and ready to go back out when the moon goes away....