Page 1 of 1

Drivers detected as virus

Posted: Thu Aug 31, 2017 9:17 pm
by n5zap
I am trying to download and install SDRUno 1.13 and the API drivers version 2.10 and Windows defender is detecting both of them as a virus. I know the normal guidance here is to turn off virus protection, but does anyone know if these files are good or not? I ask because when I installed SDRUno 1.13 under VMWare I got several blue screens with "KMODE Exception Not Handled" which is a pretty serious bug.

Do these things work on VMWare Fusion 8.85 on macOS Sierra? Has anyone been using them successfully?

Re: Drivers detected as virus

Posted: Fri Sep 01, 2017 5:11 am
by Mike2459
Same here. Windows Defender quarantined both the Uno installer and the XTIO Installer on August 30. Reported to be infected with Trojan:Win32/Rundas.B . The files have been stored on my PC for a couple months. Likely a false positive. Not surprising since Microsoft can't even keep a PC's clock updated with the correct time.

Re: Drivers detected as virus

Posted: Fri Sep 01, 2017 6:02 am
by DanubeBCL
Really strange. I have SDRplay_SDRuno_Installer_1.13.exe and SDRplay_ExtIO_Installer_1.0_2.exe on my PC for months. But Windows Defender never found anything strange. I probed the files manually right now with the latest virus definitions for Windows Defender: No infection found!
73, Heinrich

Re: Drivers detected as virus

Posted: Fri Sep 01, 2017 1:45 pm
by g1hbe
No problems here. Windows defender is kept up to date but hasn't reported anything. Win 8 Enterprise.

Re: Drivers detected as virus

Posted: Sat Sep 02, 2017 3:22 pm
by Hamsterdave
I had the same issue last week. I put it through VirusTotal and only 3 of the umpteen detection sets it uses flagged it as a trojan, and all 3 were different trojans. None of those were the same malware Defender listed. Must just be a bit of the code that's similar to something widely used in malware, and some of the virus detection algorithms aren't smart enough to tell the difference.

Re: Drivers detected as virus

Posted: Sat Sep 02, 2017 5:58 pm
by DanubeBCL
This is normal business.
Many radio softwares (commercial or freeware) are reported evil by a couple of virus engines when you upload them to Virustotal. Some virus engines change their mind daily. Today a software is benign, tomorrow exactly the same software is evil all of a sudden. Next week it is good again.
It's the same old story.
73, Heinrich

Re: Drivers detected as virus

Posted: Mon Sep 04, 2017 7:19 pm
by mikeladd
I agree with DanubeBCL. This is a false positive.