[GH-ISSUE #2] Windows defender with trojan detection in QuecDeploy_x64_1.0.4.exe #2

Closed
opened 2026-02-27 06:00:11 +03:00 by kerem · 6 comments
Owner

Originally created by @Flachzange on GitHub (Feb 23, 2025).
Original GitHub issue: https://github.com/iamromulan/QuecDeploy/issues/2

Hi @iamromulan,

Windows Defender gives me Trojan warning when opening QuecDeploy_x64_1.0.4.exe:

Image

Could you provide details on this?

Thanks!

Originally created by @Flachzange on GitHub (Feb 23, 2025). Original GitHub issue: https://github.com/iamromulan/QuecDeploy/issues/2 Hi @iamromulan, Windows Defender gives me Trojan warning when opening QuecDeploy_x64_1.0.4.exe: ![Image](https://github.com/user-attachments/assets/b350caad-b907-480c-a819-4b84d53e41f1) Could you provide details on this? Thanks!
kerem closed this issue 2026-02-27 06:00:11 +03:00
Author
Owner

@iamromulan commented on GitHub (Feb 23, 2025):

Screenshot_2025-02-17-20-23-53-03_be80aec1db9a2b53c9d399db0c602181.jpg

<!-- gh-comment-id:2676980280 --> @iamromulan commented on GitHub (Feb 23, 2025): ![Screenshot_2025-02-17-20-23-53-03_be80aec1db9a2b53c9d399db0c602181.jpg](https://github.com/user-attachments/assets/9e8960d9-5c4f-4665-8458-078294b5b58d)
Author
Owner

@iamromulan commented on GitHub (Feb 24, 2025):

I submitted this to Microsoft for analysis and they recategorized it as not malicious. May need to clear and update dynamic definitions locally now.

<!-- gh-comment-id:2678636261 --> @iamromulan commented on GitHub (Feb 24, 2025): I submitted this to Microsoft for analysis and they recategorized it as not malicious. May need to clear and update dynamic definitions locally now.
Author
Owner

@Flachzange commented on GitHub (Feb 25, 2025):

I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled.

I just uploaded the file to virustotal.com 24 out of 27 report this as malicious.

https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347

It is not a Microsoft issue.

<!-- gh-comment-id:2682871713 --> @Flachzange commented on GitHub (Feb 25, 2025): I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled. I just uploaded the file to virustotal.com 24 out of 27 report this as malicious. https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347 It is not a Microsoft issue.
Author
Owner

@iamromulan commented on GitHub (Feb 25, 2025):

I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled.

I just uploaded the file to virustotal.com 24 out of 27 report this as malicious.

https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347

It is not a Microsoft issue.

It was an issue with Microsoft defender, now moving forward it shouldn't be.

As far as other 3rd party installable antivirus goes; it's usually quicker to temporarily turn it off and run QuecDeploy than manually downloading each and placing it where it goes. Therefore, the purpose is fulfilled with still an extra step if you have anything beyond windows defender for antivirus installed.

If you have any suggestions to make this pass other virus scans I'm all ears 👂😁

<!-- gh-comment-id:2683366150 --> @iamromulan commented on GitHub (Feb 25, 2025): > I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled. > > I just uploaded the file to virustotal.com 24 out of 27 report this as malicious. > > https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347 > > It is not a Microsoft issue. It was an issue with Microsoft defender, now moving forward it shouldn't be. As far as other 3rd party installable antivirus goes; it's usually quicker to temporarily turn it off and run QuecDeploy than manually downloading each and placing it where it goes. Therefore, the purpose is fulfilled with still an extra step if you have anything beyond windows defender for antivirus installed. If you have any suggestions to make this pass other virus scans I'm all ears 👂😁
Author
Owner

@iamromulan commented on GitHub (Feb 25, 2025):

I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled.

I just uploaded the file to virustotal.com 24 out of 27 report this as malicious.

https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347

It is not a Microsoft issue.

Click that virus total link again. Looks like a bunch of the other services are following suit with Microsoft now 👍

<!-- gh-comment-id:2683369135 --> @iamromulan commented on GitHub (Feb 25, 2025): > I really appreciate your work on this, but isn't the main purpose to provide a one stop shop tool for Windows? If that is ending in a trojan warning, the purpose is not fulfiled. > > I just uploaded the file to virustotal.com 24 out of 27 report this as malicious. > > https://www.virustotal.com/gui/file/a170d4c60d0133a82b6a28ea658eac0125060a681db117cd8c13041c3c424347 > > It is not a Microsoft issue. Click that virus total link again. Looks like a bunch of the other services are following suit with Microsoft now 👍
Author
Owner

@Flachzange commented on GitHub (Feb 26, 2025):

If you have any suggestions to make this pass other virus scans I'm all ears 👂😁

Two suggestions:

  1. Get rid of the binary exe. I don't see why this is needed here. If I am not mistaken it is anyhow not possible to compile this exe from the given "source code"

  2. Get rid of that megaupload connection (or any other third party file location).

Put everything into github, let people clone the git and start the poweshell from there

<!-- gh-comment-id:2684049529 --> @Flachzange commented on GitHub (Feb 26, 2025): > If you have any suggestions to make this pass other virus scans I'm all ears 👂😁 Two suggestions: 1) Get rid of the binary exe. I don't see why this is needed here. If I am not mistaken it is anyhow not possible to compile this exe from the given "source code" 2) Get rid of that megaupload connection (or any other third party file location). Put everything into github, let people clone the git and start the poweshell from there
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/QuecDeploy-iamromulan#2
No description provided.