# Installer / Logs program virus?

**URL:** <https://forums.combatlogforums.com/t/installer-logs-program-virus/2624>\
**Category:** Warcraft Logs\
**Created:** [February 8, 2017, 4:06am UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624 "2017-02-08T04:06:17Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![mshep02](https://avatars.discourse-cdn.com/v4/letter/m/b38774/32.png) [@mshep02](https://forums.combatlogforums.com/u/mshep02)\
**Post date:** [February 8, 2017, 4:06am UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/1 "2017-02-08T04:06:18Z")

</div>

The application was working fine last week. All of a sudden, I’m getting a popup from my antivirus that is protecting me from a Trojan… I tried redownloading the installer and it says the file is damaged and that it won’t install it. I don’t want to add it to the safe list without knowing what’s up, which means I can’t upload logs anymore until it’s fixed. What gives?

---

<div class="post-metadata">

**Author:** ![intrique](https://avatars.discourse-cdn.com/v4/letter/i/91b2a8/32.png) [@intrique](https://forums.combatlogforums.com/u/intrique)\
**Post date:** [February 8, 2017, 4:14am UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/2 "2017-02-08T04:14:47Z")

</div>

earlier tonight my pc’s antivirus software removed wcl uploader fomr my pc because of a trojan and i cannot redownload it for the same reason i wont add it to the trusted programs list while my anti virus states it has a trojan. why does it say its a trojan all of a sudden ?

---

<div class="post-metadata">

**Author:** ![Kihra](https://yyz1.discourse-cdn.com/flex029/user_avatar/forums.combatlogforums.com/kihra/32/1116_2.png) [@Kihra](https://forums.combatlogforums.com/u/Kihra)\
**Post date:** [February 8, 2017, 5:47am UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/3 "2017-02-08T05:47:28Z")

</div>

Shrug, dunno. Nothing has changed on my end.

---

<div class="post-metadata">

**Author:** ![Noctus](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@Noctus](https://forums.combatlogforums.com/u/Noctus)\
**Post date:** [February 8, 2017, 3:12pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/4 "2017-02-08T15:12:48Z")

</div>

Same happening here.  
Uploaded my logs last night without problems (my uploader was up to date)  
Today i start my pc and instantly my anti virus software goes off on “Warcraft Logs Uploader.exe” and quarantined and ready to be removed on reboot.

It seems the file contains a string that is identified as something that can be a Trojan.

Detailed info from my software only say:  
Trojan.Generic  
A Generic Detection has identified a file or program that has features or behavior similar to a trojan.

---

<div class="post-metadata">

**Author:** ![Kihra](https://yyz1.discourse-cdn.com/flex029/user_avatar/forums.combatlogforums.com/kihra/32/1116_2.png) [@Kihra](https://forums.combatlogforums.com/u/Kihra)\
**Post date:** [February 8, 2017, 4:41pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/5 "2017-02-08T16:41:19Z")

</div>

What antivirus software are you all using? This doesn’t make much sense to me since the uploader hasn’t changed, so I assume it’s a false positive from the antivirus software. Maybe it maintains some online list somewhere that it just updated to all your computers.

---

<div class="post-metadata">

**Author:** ![Bravox](https://avatars.discourse-cdn.com/v4/letter/b/b5a626/32.png) [@Bravox](https://forums.combatlogforums.com/u/Bravox)\
**Post date:** [February 8, 2017, 5:37pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/6 "2017-02-08T17:37:03Z")

</div>

Having same issue. No problems running the uploader Sunday. Tuesday I couldn’t get it to open or install. I am using Bitdefender Total Security 2017

---

<div class="post-metadata">

**Author:** ![Kihra](https://yyz1.discourse-cdn.com/flex029/user_avatar/forums.combatlogforums.com/kihra/32/1116_2.png) [@Kihra](https://forums.combatlogforums.com/u/Kihra)\
**Post date:** [February 8, 2017, 5:53pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/7 "2017-02-08T17:53:11Z")

</div>

Looks like this is just a thing sometimes with Adobe AIR. Need to get the false positive removed, e.g.:

[https://forums.adobe.com/thread/1801804](https://forums.adobe.com/thread/1801804)

---

<div class="post-metadata">

**Author:** ![Bravox](https://avatars.discourse-cdn.com/v4/letter/b/b5a626/32.png) [@Bravox](https://forums.combatlogforums.com/u/Bravox)\
**Post date:** [February 8, 2017, 6:03pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/8 "2017-02-08T18:03:20Z")

</div>

Update: My Bitdefender updated 3 times in last 4 hours and now the uploader installs and works fine.

---

<div class="post-metadata">

**Author:** ![Kihra](https://yyz1.discourse-cdn.com/flex029/user_avatar/forums.combatlogforums.com/kihra/32/1116_2.png) [@Kihra](https://forums.combatlogforums.com/u/Kihra)\
**Post date:** [February 8, 2017, 6:04pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/9 "2017-02-08T18:04:47Z")

</div>

I should add that the uploader never even touches a Windows PC from build to deployment. It is created and packaged exclusively on Mac OS X, and then it is deployed to the production servers that run Linux.

---

<div class="post-metadata">

**Author:** ![mshep02](https://avatars.discourse-cdn.com/v4/letter/m/b38774/32.png) [@mshep02](https://forums.combatlogforums.com/u/mshep02)\
**Post date:** [February 10, 2017, 2:00pm UTC](https://forums.combatlogforums.com/t/installer-logs-program-virus/2624/10 "2017-02-10T14:00:38Z")

</div>

I went ahead redownloaded everything to ensure it was from the website, which pinged in my antivirus again, so I removed the file from quarantine and added it to my Vipre AV safe list. Not having problems anymore. It still weirded me out, but it was good to get some feedback about it. Thank you!
