dotnet apphost.exe detected as Trojan
See original GitHub issueSteps to reproduce
I cloned the repo, and executed:
Import-Module .\build.psm1
Start-PSBootstrap
Expected behavior
Everything works great.
Actual behavior
Popup from Windows Defender, claiming that this file:
C:\Users\<me>\AppData\Local\Microsoft\dotnet\packs\Microsoft.NETCore.App.Host.win-x86\5.0.0\runtimes\win-x86\native\apphost.exe
Is a virus: Trojan:Win32/Fuery.C!cl
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:7 (3 by maintainers)
Top Results From Across the Web
net5.0 apphost.exe recognized as a Trojan.Win32.Sdum. ...
After migrating an ASP.NET Core project to .NET5 the apphost.exe process is recognized as Trojan.Win32.Sdum.gen by my Kasperky Endpoint Security 11.3.0 ...
Read more >Malwarebytes detected a trojan. How worried should I be?
I have Malwarebytes Premium that detected a Trojan.Crypt. ... The file in question is called "DOTNET-APPHOST-PACK-7.0.5-WIN-X64.MSI".
Read more >My ASP.NET core application executable detected as Trojan
While it's possible that your packager or compiler is infected(a la XCodeGhost), it's much more likely that it's a false-positive. Share.
Read more >File security 7.2 - false positive? - .NET SDK - 5.0.102
Hi anyone else encountered this being reported as infected? triggered during windows update. Time;Scanner;Object type;Object;Detection ...
Read more >Windows Analysis Report apphost.exe
Net C# or VB.NET; C, C++ or other language; Is malicious; Internet. Behavior Graph ID: 833000 Sample: apphost.exe Startdate: 23/03/2023 ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
This has been addressed. Steps to fix locally:
Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions
Submitted to Defender people following instructions here: https://www.microsoft.com/en-us/wdsi/filesubmission/.