Won't Download. Defender thinks this is a Wacatak.B!ml Trojan virus.

[ArtisanDejure]

Here are the details when the file is autodeleted as it is being downloaded. I've tried adding an exception for the URVR.zip file which doesn't seem to work.

\Downloads\UEVR.zip|https://objects.githubusercontent.com/github-production-release-asset-2e65be/531307134/ace918d1-d42a-4f21-b28c-c4b4a5fdb8c7?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240106%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240106T154456Z&X-Amz-Expires=300&X-Amz-Signature=cada4e6b52ee7139bbf44ae3330e23045c155be0cdbdb6c0c4992e9d5141eb2d&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=531307134&response-content-disposition=attachment%3B%20filename%3DUEVR.zip&response-content-type=application%2Foctet-stream|pid:3428,ProcessStart:133490294986615592

[JRDevo]

Similar with BitDefender "UEVR.zip tried to load a malicious resource detected as Gen:Variant.Midie.141938 and was blocked. Your device is safe."

Seems its also Kaspersky, check #17 (comment)

[Zeltrax]

Having same ish message aswell as chrome is blocking it.

We blocked this dangerous page for your protection:
https://objects.githubusercontent.com/github-production-release-asset-2e65be/531307134/ace918d1-d42a-4f21-b28c-c4b4a5fdb8c7?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240106%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240106T222201Z&X-Amz-Expires=300&X-Amz-Signature=84fd3ffbd2b238e01775b3071fedda569f8981553f82924a30cf7e28fa32b138&X-Amz-SignedHeaders=host&actor_id=8917813&key_id=0&repo_id=531307134&response-content-disposition=attachment%3B%20filename%3DUEVR.zip&response-content-type=application%2Foctet-stream
Threat name: Gen:Variant.Midie.141938
Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

[xcrgames]

Same problem on my side of things.

[SaxoFr]

Idem avec l'antivirus Microsoft ... Que faire ?

[neovinter]

Same issue. Windows Defender sent file UEVRBackend.dll to quarantine.
Virustotal: 12 security vendors and no sandboxes flagged this file as malicious
What is the cause of this issue?

[JRDevo]

Downloaded & extracted 1.3 today without issues from Bitdefender.

Can others try?

[Zeltrax]

Downloaded & extracted 1.3 today without issues from Bitdefender.

Can others try?

Yep all working now for me.

[neovinter]

Downloaded & extracted 1.3 today without issues from Bitdefender.

Can others try?

I did, everything is much better now

[Gerion76]

I cant download it. Not working here.

[lucalemboure1]

same here :(
not working ==> Trojan.GenericKD.7129053

[xNepenthe]

Same over here.
Using Windows 11; blocked directly by Google Chrome, then when enabling "Insecure origins treated as secure", it downloads but gets flagged right away by Windows Defender: Trojan:Win32/Malagent!MSR

[mikashki]

Same experience as above. Tried to download just now, but the uevr.zip gets flagged and blocked by Windows Defender (Win11), also Chrome and Edge browsers refuse to download/save it on disc. Defender says it contains Trojan:Win32/Malagent!MSR

[praydog]

Try the Nightly builds. These are picked up by some vendors but not as many as the main build (yet). It might change as more runtime analysis is performed on them.

[mikashki]

Try the Nightly builds. These are picked up by some vendors but not as many as the main build (yet). It might change as more runtime analysis is performed on them.

Unfortunately, also the nightly build uevr.zip gets flagged. Now the zip download succeeded, but unzipping it causes a Windows Defender warning about Trojan:Win32/Wacatac.H!ml in uevrinjector.exe and the .exe is removed from the unzipped folder.