Norton Security Suite Deletes UCCNC.exe!

[frostheave]

Yes, I agree it was very recently.
My scan last Tuesday showed no issues.

Today's update to Windows Defender and scan
caused the False Alarm.

[ger21]

It's apparently happened to a lot of people in the last two days, apparently due to a Windows or defender update.

[cncdrive]

Meanwhile I've made some checks and now it is clear that the Obfuscation is causing the issue to some antiviruses.
Earlier this did not cause any false alerts and now it is, so they changed something in their algorithms.
What I've tested is that I picked some random UCCNC versions and tested the obfuscated uccnc.exe files and all gave the same 9 positive alerts.
Next I compiled the same files without obfuscation and then they all came back with all negative results.
So, it is now 100% sure that these antivirus softwares started to not like obfuscation.
But we need obfuscation otherwise the application would be easily crackable.
So, we will wait for the antivirus guys to see what they will say about this issue. I hope they will somehow fix this problem.

[ThreeDJ16]

Just wanted to add the latest update on my Win 10 defender just flagged my UCCNC executable also as a Trojan. Which of course I know isn't true, so I simply restored it. Damn Microsoft....LOL.

[Battwell]

i use malwarebytes. and it deleted uccnc.exe on my office pc last week ( has complained previously about a pup file but never deleted anything)
none of my machines are on the net or running anti malware software so they are safe.

[cncdrive]

I got a reply from F-secure (one of where I sent the UCCNC.exe file and one of which detected the UCCNC.exe as harmful), the following:

Greetings,

Thank you for your submission.

Our analysis indicates that the file you submitted is not harmful. It is not identified as malicious by our security products.

If your security product is repeatedly identifying a clean file as harmful, please check the following:

1.) The product is updated to use the latest database. Instructions are available at: https://community.f-secure.com/t5/Secur ... ta-p/56391
2.) Verify that the file hash of the submitted sample matches the hash of the detected file. You may use any file hash verification method of your choice.

If the product is using the latest database and the file hashes match, please provide us a screenshot of the detection prompt for further investigation.

If there is anything else we can help you with, please do not hesitate to contact us again.

Best Regards,
Azim
Malware Analyst
F-Secure Security Labs

[Battwell]

i just had to reinstall 1.048 and windows deleted it as soon as it installed.
this is how to add it to exclusion list in windows 7
https://interguard.awarenesstechnologie ... ws-xp.aspx

[cncdrive]

We have released the UCCNC version 1.2049 which is the same as version 1.2048 except, the following differences:
- The UCR201 plugin was updated, we have fixed a few minor issues.
- We have added some no use code to the UCCNC.exe just to untrigger the buggy Windows Defender and F-secure antiviruses, so now they not giving a false alert.

The download:
http://cncdrive.com/UCCNC.html