[GH-ISSUE #438] Windows Defender identifying 4.5.0 as Trojan:Script/Wacatac.B!ml #422

New issue

Closed

opened 2026-02-25 20:31:36 +03:00 by kerem · 4 comments

kerem commented

2026-02-25 20:31:36 +03:00

Owner

Originally created by @scarfacestrawberry on GitHub (Dec 27, 2024).
Original GitHub issue: https://github.com/aluxnimm/outlookcaldavsynchronizer/issues/438

Window Defender on Windows 11 Pro is identifying https://github.com/aluxnimm/outlookcaldavsynchronizer/releases/download/v4.5.0/OutlookCalDavSynchronizer-4.5.0.zip as malware.

Originally created by @scarfacestrawberry on GitHub (Dec 27, 2024). Original GitHub issue: https://github.com/aluxnimm/outlookcaldavsynchronizer/issues/438 Window Defender on Windows 11 Pro is identifying https://github.com/aluxnimm/outlookcaldavsynchronizer/releases/download/v4.5.0/OutlookCalDavSynchronizer-4.5.0.zip as malware.

kerem closed this issue

2026-02-25 20:31:36 +03:00

kerem commented

2026-02-25 20:31:36 +03:00

Author

Owner

@scarfacestrawberry commented on GitHub (Dec 27, 2024):

Additional Info:

Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
 For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0
 	Name: Trojan:Script/Wacatac.B!ml
 	ID: 2147735503
 	Severity: Severe
 	Category: Trojan
 	Path: file:_C:\Users\********\AppData\Local\Temp\tmpA277.tmp
 	Detection Origin: Local machine
 	Detection Type: FastPath
 	Detection Source: Real-Time Protection
 	User: ********\********
 	Process Name: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
 	Security intelligence Version: AV: 1.421.1024.0, AS: 1.421.1024.0, NIS: 1.421.1024.0
 	Engine Version: AM: 1.1.24090.11, NIS: 1.1.24090.11

@scarfacestrawberry commented on GitHub (Dec 27, 2024): Additional Info: ``` Microsoft Defender Antivirus has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0 Name: Trojan:Script/Wacatac.B!ml ID: 2147735503 Severity: Severe Category: Trojan Path: file:_C:\Users\********\AppData\Local\Temp\tmpA277.tmp Detection Origin: Local machine Detection Type: FastPath Detection Source: Real-Time Protection User: ********\******** Process Name: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE Security intelligence Version: AV: 1.421.1024.0, AS: 1.421.1024.0, NIS: 1.421.1024.0 Engine Version: AM: 1.1.24090.11, NIS: 1.1.24090.11 ```

kerem commented

2026-02-25 20:31:36 +03:00

Author

Owner

@aluxnimm commented on GitHub (Dec 27, 2024):

can happen after new release, will be submitted for check for malware analysis to sort out false positives.

@aluxnimm commented on GitHub (Dec 27, 2024): can happen after new release, will be submitted for check for malware analysis to sort out false positives.

kerem commented

2026-02-25 20:31:36 +03:00

Author

Owner

@vanillaFriday commented on GitHub (Dec 27, 2024):

I had the same problem. I want to install the 4.5.0 Version with Outlook 2019 and Win 11 Pro. Identified as Trojan:Script/Wacatac.H!ml. File which was detected as malicious is placed at [APPDATA]\Local\Temp\tmp297D.tmp

@vanillaFriday commented on GitHub (Dec 27, 2024): I had the same problem. I want to install the 4.5.0 Version with Outlook 2019 and Win 11 Pro. Identified as Trojan:Script/Wacatac.H!ml. File which was detected as malicious is placed at [APPDATA]\Local\Temp\tmp297D.tmp

kerem commented

2026-02-25 20:31:36 +03:00

Author

Owner

@scarfacestrawberry commented on GitHub (Jan 5, 2025):

Defender is no longer flagging it as malicious and virus total shows the all clear:
https://www.virustotal.com/gui/file/6da126fb91b74ea884d10941bbbf9eea5781c0a2f57fd017ab0bcea4b44bbf60/detection

@scarfacestrawberry commented on GitHub (Jan 5, 2025): Defender is no longer flagging it as malicious and virus total shows the all clear: https://www.virustotal.com/gui/file/6da126fb91b74ea884d10941bbbf9eea5781c0a2f57fd017ab0bcea4b44bbf60/detection

kerem referenced this issue

2026-03-01 17:42:01 +03:00

[GH-ISSUE #422] [Request] Run on Docker container #872