Community


Virus detected while executing viewer-7.6.2.0.exe

Links used in this discussion
We downloaded viewer-7.6.2.0.exe from remoteutilities.com/download and are receiving the following from Defender:

Trojan:Win32/Suschil!rfn
This program is dangerous and executes commands from an attacker.
file: [redacted]\AppData\Local\Temp\{98323EAD-B807-4D12-963D-5C8A7E41EDA8}\viewer-7.6.2.0.msi

Any help would be appreciated
Hello,

Thank you for your message.

Unfortunately, we’re not sure if we can provide much assistance in case antivirus software is incapable to distinguish between malware and a legitimate program that has been digitally signed with an EV Code Signing certificate and has been on the market for 15 years.

This specific file (version 7.6.2.0) has been available for several months. Moreover, it is the Viewer (a client), which, even in theory, cannot be used to grant access.

We can only suggest that you submit a false positive report to Microsoft using this link:
https://www.microsoft.com/en-us/wdsi/filesubmission.

Hope that helps.

Information Technology wrote:

We downloaded viewer-7.6.2.0.exe from remoteutilities.com/download and are receiving the following from Defender:

Trojan:Win32/Suschil!rfn
This program is dangerous and executes commands from an attacker.
file: [redacted]\AppData\Local\Temp\{98323EAD-B807-4D12-963D-5C8A7E41EDA8}\viewer-7.6.2.0.msi

Any help would be appreciated

You can also restore it from Quarantine in Windows Defender and tell it to mark the application as safe, so that it won't block it the next time you try to install it.
Support level: Starter
I have the same, windows defender   :/
Hello,

We continuously submit false positive reports to Microsoft (and other antivirus vendors), but it would be tremendously helpful if affected users also did the same. Submitting a report takes only a minute, and the more complaints the a/v vendors receive, the faster they are likely to act.

We provide relevant false positive submission links for all major antivirus vendors on this page: https://www.remoteutilities.com/support/kb/remote-utilities-is-mistakenly-detected-as-malware/.

Thank you for your support!
Support level: Starter
Are there such problems on Hosts too?

Or only on Viewer?

D L wrote:

Are there such problems on Hosts too?

Or only on Viewer?

Unfortunately, with modern antivirus software anything can be declared a 'threat', even an empty file.

Since recently, perhaps it doesn't make sense to even bother with checking Virustotal results because they don't have anything to do with reality.
Support level: Starter
Do you get virus messages when installing or use app Host
For me it's not a problem (Viewer), but at the ends (Host) it will be....



I want to upgrade to a newer version, but I don't know if I should :/
Support level: Free or trial
I just disabled Realtime Protection, Cloud, and Tamper Protection and install went fine.  Then re-enabled said protections.
Support level: Free or trial

* Website time zone: America/New_York (UTC -4)