Windows defender detects Trojan:Win32/Wacatac.B!ml

[marimo]

Hi Brad,

I"m re-investing time in our dance-club for automating the music, but encountered a problem.
When i download a 64 bit version of BallroomDJ, defender detects a Trojan:Win32/Wacatac.B!ml, and deletes the installer.

Tried to read about it on different forums, but it's mislaeding information.
One says it's a threat, another says it's a false positive.

Any recommendations??

greetings,
Mario (Marimo)

[bll]

There is no malware present in BallroomDJ.

The windows defender definitions should be updated by now.
I have included the instructions that microsoft sent to update the virus definitions.

This false positive has been reported to microsoft before.
These false positives from the anti-virus companies are a real problem, as many have no easy way to report the false positive.
Or were reported, and didn't remove the bad entry from their database.

Analyst comments:

We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

[bll]

It does appear that Windows 8 at least is detecting this as malware again.
I am re-reporting this to microsoft.
These anti-virus false positives are going to kill off small software projects.

On Windows 8 32-bit. 64-bit seems ok.

[marimo]

Hi,
I've followed the instructions you added, and now everythinf went just fine from downloading till installation.

thanks!