[GH-ISSUE #259] Windows Binary blocked by MS Defender (new trojan flagged?) #133

Closed
opened 2026-04-08 16:50:36 +03:00 by zhus · 2 comments
Owner

Originally created by @cokelly on GitHub (Aug 28, 2023).
Original GitHub issue: https://github.com/sigoden/dufs/issues/259

Problem

The latest dufs windows binary is flagged as containing Trojan AgentTesla!ml as below:

image

This seems on the face of it to be different to #251 which flagged a Trojan identified as Malgent!MSR.

Environment:

  • Dufs version: 0.36.0
  • OS Info: W11
Originally created by @cokelly on GitHub (Aug 28, 2023). Original GitHub issue: https://github.com/sigoden/dufs/issues/259 **Problem** The latest dufs windows binary is flagged as containing Trojan _AgentTesla!ml_ as below: ![image](https://github.com/sigoden/dufs/assets/1672300/6c523d30-4eef-4dbb-afed-d0cba7c354cd) This seems on the face of it to be different to #251 which flagged a Trojan identified as _Malgent!MSR_. **Environment:** - Dufs version: 0.36.0 - OS Info: W11
zhus closed this issue 2026-04-08 16:50:36 +03:00
Author
Owner

@sigoden commented on GitHub (Aug 28, 2023):

Please updaet windows security to latest malware definition and try again

  1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
  2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
  3. Run "MpCmdRun.exe -SignatureUpdate"

If malware detection still exists, you can Sumit a file for malware analysis

<!-- gh-comment-id:1695367151 --> @sigoden commented on GitHub (Aug 28, 2023): Please updaet windows security to latest malware definition and try again 1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender 2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures” 3. Run "MpCmdRun.exe -SignatureUpdate" If malware detection still exists, you can [Sumit a file for malware analysis](https://www.microsoft.com/en-us/wdsi/filesubmission)
Author
Owner

@cokelly commented on GitHub (Aug 28, 2023):

Ah - apologies. Once this morning's Defender definitions update ran the file was no longer flagged.

<!-- gh-comment-id:1695403402 --> @cokelly commented on GitHub (Aug 28, 2023): Ah - apologies. Once this morning's Defender definitions update ran the file was no longer flagged.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sigoden/dufs#133