SharpCap Forums

Win 10 defender reports that the latest version of SC has this Trojan:Win32/Azden.A!cl. Windows blocked an attempt to download moments ago. The installed beta version of3.1 no longer runs for more than a few moments. Defender reported the Trojan 3 times today.

I'm not running any other anti-virus software on this PC, and I am reluctant to try downloading it to another PC running Norton.

Thanks for the heads up - It looks like the very latest build of SharpCap 3.0 is being affected by this false positive, but not older builds or SharpCap 3.1. I have taken down the build for now and reported the false positive to Microsoft.

cheers,

Robin

Just now I tried to download the latest version, .4024.0 to a PC running windows 10 home, v. 1709 build 16299.125, using Edge. A dialog box raises with a choice of run or save. Both options result in a "smart screen" warning and the download The "smart screen" feature identifies the download as unsafe and blocks it. Using the latest version of Firefox the install file downloads and can be run.

The latest 3.1 beta downloads and installs normally.

Thank you - that was fine yesterday and the installed files are not showing any issues with desktop windows defender with latest virus definitions. I submitted a previous build to Microsoft's false positive reporting service and they even agreed it wasn't malware, but it doesn't seem to have changed anything...

The good news is that I think I have worked out how to stop this from happening (fingers crossed). The build of 3.1 I put up yesterday has the new changes in it and I had just made a new build of 3.0 with the same fixes when I saw your post (so that was good timing).

So, please try 3.0.4039 and see if that works OK for you. I really hope this works and doesn't get more problems as I have spent the last two days chasing my tail over this when I would much rather be adding new features and fixing bugs.

cheers,

Robin

PS. for the technically curious, the problems are (I think) caused by my use of a tool top make the code of SharpCap harder to hack or reverse engineer. I do this to stop people from creating cracked versions or stealing the code. Virus writers use similar tools to try to hide what they are doing. I presume that the Azden.A!cl virus uses exactly the same tool that I do and that tool leaves patterns in the code that the antivirus software spots.

Yes! v 3.0.4039 downloads with Edge and installs and runs normally. Thank you.

Now you can get back to more good feature sets and the little problem with stacking in the latest beta

-David

Wait 5 more minutes... 4039 is missing a flag that lets it use extra memory on 64 bit windows. 4040 just building!

Robin

Ok, try 4040 - should be good now.

cheers,

Robin