Trojan threat

[redbone1]

I installed uccnc on my windows 10 laptop. went to the shop and connected to the uc400eth. When I tried to run uccnc I got a windows defender popup
saying I had a virus threat. the threat was trojan win32/zpevdo.a. If I let windows defender remove the threat it deletes my uccnc shortcut. If I look in
the uccnc folder there is no .exe file to run from there. Anyone ever have this problem. What can I do.

Thanks Jim

Similar Threads:

• UCCNC Trojan Horse?
• threat cutting problems
• CNC zone Trojan Horses

[ger21]

You can add an exclusion in Windows Defender.

I run UCCNC on two Windows 10 PC's with Windows defender, and have not seen this, but I do have exclusions setup, as UCCNC will load faster iirc.

Go to Windows Defender, then Virus and Threat Protection. Scroll down to Exclusions, then Add Exclusion, and select the UCCNC install folder.

[redbone1]

I can't even load the software. I have tried it on 2 windows 10 laptops and get the same results. This may have something to do with installing the latest
windows 10 upgrade. I know for sure It was loaded on both laptops at one point. I will disable windows defender and see what happens. I never have gotten
any threats in the past. Its not only uccnc but anything associated with uccnc, program data, start menu etc. Seems like anything I try with uccnc whether it the
motion control or the software has not been cooperating.

Thanks for the help.

[LeeWay]

You should not need defender unless you keep it connected online.
Turn that rascal off.

[redbone1]

Thats exactly what I just did. Loaded fine on both machines. I think it will be ok now. had to be the new win 10 upgrade.

[dezsoe]

It is a false positive. While installing, disable Defender. When the setup is ready, exclude the UCCNC folder. Disabling Defender is a temporary solution, because when Windows starts it will be enabled again.

[Signal9]

Build 2047 does not have this possible trojan virus. So I guess the question is what major change between build 2047 and 2048?

I uploaded the file to virustotal.com and it showed 3 types of trojan/malware/adware for the latest build 2048.

If your cnc controller pc/laptop is not connected to your network/wifi etc. then I guess you have nothing to worry about.

But if you move gcode via a usb thumb drive from your cad/cam computer to your laptop with ucncnc then you are possibly infecting your other computers if this turns out to be a true virus.

I show some older past builds has similar issue, but then other builds after that did not have the issue.

[ger21]

It's not a virus. CNC Drive has posted some additional info on their user forum.
It seems that AV software is just looking at different things in the .exe files since the latest Windows Defender update.

[ger21]

A new version of UCCNC (1.2049) was just released that contains a fix for the false positive virus issue.