Author Topic: False-positive Defender virus detection in Firefox en-GB language extension  (Read 537 times)

0 Members and 1 Guest are viewing this topic.

Offline HwAoRrDkTopic starter

  • Super Contributor
  • ***
  • Posts: 1527
  • Country: gb
Anybody else recently been getting a virus detection by Windows Defender for 'Trojan:Script/Wacatac.B!ml' in the en-GB language pack for Firefox?

It detects it in extensions\langpack-en-GB@firefox.mozilla.org.xpi in the Firefox profile directory.

Judging from a quick Google search, 'Wacatac' seems to be notorious for false-positive detections in all sorts of things, so I'm pretty sure it's a false positive. So, no thank you Defender, I don't want you to quarantine or delete the file - I need it for my web browser to work!

However, that being said, if I remove the extension (via the proper means, not deleting the file), will my Firefox revert to a default interface language, presumably en-US? I suspect I'm going to get bothered by this false detection every day until the Defender signatures get updated (or the extension is updated to avoid whatever triggers detection).
 

Offline bitwelder

  • Frequent Contributor
  • **
  • Posts: 968
  • Country: fi
Have you tried to upload that file to virustotal.com and see what it reports?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf