[GH-ISSUE #96] Bug: Microsoft Defender ATP Malware detection Trojan:Win32/Fuery.C!cl #1998

Closed
opened 2026-03-14 02:00:46 +03:00 by kerem · 1 comment
Owner

Originally created by @Cannonballitk on GitHub (Sep 9, 2020).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/96

Microsoft Defender ATP shows the winagent-v0.10.2.exe as Trojan.
Probably a false positive but nice to fix.

https://imgur.com/KO58TkX

tacticalrmm-virus.pdf

Originally created by @Cannonballitk on GitHub (Sep 9, 2020). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/96 Microsoft Defender ATP shows the winagent-v0.10.2.exe as Trojan. Probably a false positive but nice to fix. [https://imgur.com/KO58TkX](url) [tacticalrmm-virus.pdf](https://github.com/wh1te909/tacticalrmm/files/5194888/tacticalrmm-virus.pdf)
kerem closed this issue 2026-03-14 02:00:51 +03:00
Author
Owner

@wh1te909 commented on GitHub (Sep 10, 2020):

Lol yea obv it's a false positive but I understand why AV picks it up, it basically is a legal virus xD.

Nothing I can do without code signing the executable which I cannot afford to pay the yearly fee and even then I would have to contact all the AV companies and get it whitelisted. MeshCentral pays to code sign their executable and they still have issues with AV flagging it...

So you'll need to add it to AV exceptions, I had to as well on all my machines.
Whitelist these 3 dirs
C:\salt
C:\Program Files\Mesh Agent
C:\Program Files\TacticalAgent

<!-- gh-comment-id:689931304 --> @wh1te909 commented on GitHub (Sep 10, 2020): Lol yea obv it's a false positive but I understand why AV picks it up, it basically is a legal virus xD. Nothing I can do without code signing the executable which I cannot afford to pay the yearly fee and even then I would have to contact all the AV companies and get it whitelisted. MeshCentral pays to code sign their executable and they still have issues with AV flagging it... So you'll need to add it to AV exceptions, I had to as well on all my machines. Whitelist these 3 dirs C:\salt C:\Program Files\Mesh Agent C:\Program Files\TacticalAgent
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/tacticalrmm#1998
No description provided.