Trojan:Win32/Werpoapt.certms (False Alarm?)
-
- Posts: 3
- Joined: Mon Dec 04, 2017 3:08 pm
Trojan:Win32/Werpoapt.certms (False Alarm?)
https://www.microsoft.com/en-us/wdsi/th ... certms!dha
In recently Windows Defender update, it reported softether client 4.xx has malware, is that really? or some false alarm?
In recently Windows Defender update, it reported softether client 4.xx has malware, is that really? or some false alarm?
-
- Posts: 183
- Joined: Sun Jul 19, 2015 4:23 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
elecman wrote:
>
> https://www.microsoft.com/en-us/wdsi/th ... certms!dha
>
> In recently Windows Defender update, it reported softether client 4.xx has
> malware, is that really? or some false alarm?
No, it doesn't contain any malware but that might depend on where you downloaded it from. If it was the official SeftEther web site then it's OK as far as my scanner is concerned.
>
> https://www.microsoft.com/en-us/wdsi/th ... certms!dha
>
> In recently Windows Defender update, it reported softether client 4.xx has
> malware, is that really? or some false alarm?
No, it doesn't contain any malware but that might depend on where you downloaded it from. If it was the official SeftEther web site then it's OK as far as my scanner is concerned.
Regards
Bill
Bill
-
- Posts: 3
- Joined: Mon Dec 04, 2017 3:08 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
@Bill please try it on Windows 10 / 8 latest windows defender, 12/4/2017 definition, my Softether dll get removed by windows defender today on multiple machines.
Yesterday is fine.
My download is from softether original site. I save that multiple copy for a few years,
Either Microsoft is wrong or there is something recently discovered.
Yesterday is fine.
My download is from softether original site. I save that multiple copy for a few years,
Either Microsoft is wrong or there is something recently discovered.
-
- Posts: 3
- Joined: Mon Dec 04, 2017 3:08 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
[attachment=0]a.png[/attachment]elecman wrote:
> @Bill please try it on Windows 10 / 8 latest windows defender, 12/4/2017
> definition, my Softether dll get removed by windows defender today on
> multiple machines.
>
> Yesterday is fine.
>
> My download is from softether original site. I save that multiple copy for
> a few years,
>
> Either Microsoft is wrong or there is something recently discovered.
> @Bill please try it on Windows 10 / 8 latest windows defender, 12/4/2017
> definition, my Softether dll get removed by windows defender today on
> multiple machines.
>
> Yesterday is fine.
>
> My download is from softether original site. I save that multiple copy for
> a few years,
>
> Either Microsoft is wrong or there is something recently discovered.
You do not have the required permissions to view the files attached to this post.
-
- Posts: 183
- Joined: Sun Jul 19, 2015 4:23 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
Unfortunately I don't use windows (I have a copy of Win10 Pro & Enterprise) except for a couple of specific apps, I've also disabled Windows Defender. I've scanned my system with the Comodo A/V & eset A/V software, no threats were found, I also couldn't find any filename similar to the one you show in attachment.
Regards
Bill
Bill
-
- Posts: 1
- Joined: Sun Mar 03, 2019 1:19 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
I also have same situation.
Windows 10 Pro, Use "softether-vpnclient-v4.22-9634-beta-2016.11.27-windows-x86_x64-intel.exe"
Alart dialog shown about PenCore.dll missing, then that shown continuously.
So difficult to operate PC. That resolved delete and Re-install SoftEther VPN Cliant.
softether-vpnclient-v4.29-9680-rtm-2019.02.28-windows-x86_x64-intel.exe
Windows 10 Pro, Use "softether-vpnclient-v4.22-9634-beta-2016.11.27-windows-x86_x64-intel.exe"
Alart dialog shown about PenCore.dll missing, then that shown continuously.
So difficult to operate PC. That resolved delete and Re-install SoftEther VPN Cliant.
softether-vpnclient-v4.29-9680-rtm-2019.02.28-windows-x86_x64-intel.exe
You do not have the required permissions to view the files attached to this post.
-
- Posts: 183
- Joined: Sun Jul 19, 2015 4:23 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
You don't have the same problem as mentioned in this thread. It seems you're saying you've resolved your issue, is that correct? In future, don't add your posts to a thread that's not related to your problem.
Regards
Bill
Bill
-
- Posts: 1
- Joined: Fri Mar 08, 2019 5:00 am
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
gnpnfld's problem *is* related/the same though; maybe just didn't have enough info provided...unless it's because it was resolved using a newer installation of SoftEther + VPNGate plugin.
I get the same prompt of "|PenCore.dll not found", with the path of the detected file being "%temp%\VPN_<4_random_chara>\" the same as elecman's screenshot.
This is whenever I start an already installed SoftEther (v4.19 Build 9605).
File's hash and VT result: https://www.virustotal.com/gui/file/af9 ... /detection
To think that this detection has re-emerged recently, or has always been here... Last post before gnpnfld was posted Dec 2017.
Anyway, so this is a false alarm then? So it might've been just an old file, if it is resolved by the newer/latest versions of SoftEther or with VPNGate plugin.
I get the same prompt of "|PenCore.dll not found", with the path of the detected file being "%temp%\VPN_<4_random_chara>\" the same as elecman's screenshot.
This is whenever I start an already installed SoftEther (v4.19 Build 9605).
File's hash and VT result: https://www.virustotal.com/gui/file/af9 ... /detection
To think that this detection has re-emerged recently, or has always been here... Last post before gnpnfld was posted Dec 2017.
Anyway, so this is a false alarm then? So it might've been just an old file, if it is resolved by the newer/latest versions of SoftEther or with VPNGate plugin.
You do not have the required permissions to view the files attached to this post.
-
- Posts: 4
- Joined: Fri Sep 16, 2016 8:20 pm
Re: Trojan:Win32/Werpoapt.certms (False Alarm?)
Today I've downloaded latest RTM from official page and I also get the detection via Windows Defender (Windows 10 Home)