Tranquil IT Forum

Hello,

The package tis-Notepadpluplus_8.9.6.4-12_x64 downloaded this morning from your repository has been flagged by Windows Defender as a Trojan (Trojan:script/Wacatac.C!ml) and quarantined.

Thank you for your help.

- Installed WAPT version (2.6.1.17765)
- Server OS (Linux and version (Debian 13))
- Administration/package creation machine OS (Windows Server 2019)

Hi Sylvie,

yes, there's a VirusTotal alert for the Notepad++ package [1] just for Microsoft; all the others are OK.

One of WAPT's security features is that the package is a signed zip file whose contents you can verify. So you can audit the setup.py file and check the hashes of the included executables, here npp.8.9.6.4.Installer.x64.exe [2], where VirusTotal is completely OK, even Microsoft Defender, which is unhappy if we put this same file in a zip file.

So if you have alerts with your antivirus/EDR, you should refer to VirusTotal to see if it's a false positive. If you're a Microsoft Defender paying customer, you can resubmit the file for them to perform another analysis.

Regards,

Denis


[1] https://www.virustotal.com/gui/file/f40 ... 08c231f628
[2] https://www.virustotal.com/gui/file/cb9 ... 288e4ed2ea

Hi Sylvie,

it seems Microsoft has changed its mind and everything is green now:

https://www.virustotal.com/gui/file/f40 ... ?nocache=1

Has it worked for you too?

Regards,

Denis