ICS 9.3 with imbedded openSSL flagged as virus

[AndreL 0]

Hi,

 

Application using ICS 9.3 and {$DEFINE OpenSSL_Resource_Files} is flagged by microsoft defender as virus : trorjan.script/wacatac

 

Removing {$DEFINE OpenSSL_Resource_Files} and {$DEFINE OpenSSL_ProgramData} solved the issue with the same local openssl dlls.

 

A. Léonard

[Angus Robertson 574]

False virus alarms are a way of life due to the different ways of attempting to detect malicious files.  You could try updating to the latest OpenSSL files to see if the problem goes away. 

 

I believe I have Windows Defender running on my servers, since Sophos now refuses to run on servers, and I've not seen any reports or issues, nor has anyone else reported problems with OpenSSL for many years. 

 

Goggle once decided a five year old OpenSSL DLL on my web site was malicious and immediately flagged my entire web site as malicious when anyone visited it, took a few days to get the block removed, but that is why downloading files from my site now requires a password, to stop Google accessing them with it's flaky detection techniques.  

 

Angus