Trojan found in duelit update?

[KratosChest]

Hey

When duelit did an autoupdate,  Windows Defender did pup up. Defender blocks duelit now and I don’t want to change anythining witthin Windos Defender.  

Duelit was deleted from my PC and if I download it from the forum, I cant open it.

I’ve checked  the downloaded duelit.rar with windows defender. Screenshot is in the attachment.

Thank you

Topic

[Duelit Forum Bot]

Hello KratosChest,

Thank you for your request, we will try to solve your problem as soon as possible.

In the meantime, please check out the tutorials section, nearly all common issues are answered there.
When your problem still remains, try using the search function to make sure that a similar request wasn’t answered in another thread already.

Keep in mind that we can only give support when you added screenshots (of NOX + Duelit) to your thread.

This is an automated message, your request will be processed shortly.

[Goof]

You’ll have to add duelit as an exception to your antivirus program, procedure varies between antivirus programs.

[steilz]

Hello,

This is a common issue with autoit scripts.
Duelit connects to the Duelit server, autoupdates, writes files etc., some firewalls/antivirus are giving out false-positives. This has been like that since the beginning.

Unfortunately in order to prevent that, we’d have to send every single Duelit update to every single security company in order to get checked and to prevent false-positives.
This takes days and even weeks and since i am updating Duelit sometimes multiple times a day – impossible.

You have to allow the .exe (in case of autoupdating maybe the whole folder) in your firewall / antivirus.

[KratosChest]

So, I can ignore the Win32/Fuerboos.C!cl ? It isn’t dangerous or something? ’cause defender tells me it is an serious trojan

[steilz]

It’s a false positive, which means that it’s being detected as something which it isn’t. Most likely after the next Windows Defender update it won’t be detected anymore, or maybe even as something else.

[KratosChest]

steilz wrote:

It’s a false positive, which means that it’s being detected as something which it isn’t. Most likely after the next Windows Defender update it won’t be detected anymore, or maybe even as something else.

allright.                     Thanks for the help

[steilz]

Uploading it to VirusTotal shows you that only 2 out of 66 engines detect it as a “malicious software”

https://www.virustotal.com/#/file/ac3ca74ab449edccfdd99ae50c65f26071b3583f3517252a976dd94f43705bae/detection

[KratosChest]

I’ve uploaded it also:

    https://www.virustotal.com/#/file/ca29d6409a675d1e5f1343a5c478e139903f34e382d5c784b35825afc79d250d/detection

its clean.

[steilz]

Yea, as you can see, Windows Defener might not be a reliable source

[Goof]

Windows Deafener, deafens the unsuspecting PC user with false positive notifications and HDD thrashing….

[Author]

Replies