Community

« Back to Antivirus issues

Trojan:Win32/Suschil!rfn - host-7.6.2.0.msi

Links used in this discussion
Support level: Free or trial
Windows 10 Microsoft Defender has just "Detected Trojan:Win32/Suschil!rfn" in the latest Remote Utilities host-7.6.2.0.msi file and quarantined it.
Is this a false positive?
Is Microsoft supposed to relent after being told it's fine and allow the file?
If so, who tells them?
Hello Robin,

Thank you for your message.

Version 7.6.2.0 has been around for several months now and is digitally signed by an EV Code Signing certificate. Back when we initially released the version there was a detection by Windows Defender by then they prompty removed it.

Microsoft has a dedicated form to submit a false positive report:
https://www.microsoft.com/en-us/wdsi/filesubmission

Feel free to submit an FP using the form above. We will do that as well.

Thanks.
Support level: Free or trial
Version 7.6.2.0 was released 16th October, so less than two months ago.

Thank you for submitting a false positive form to Microsoft for this - I'd rather not as they make you sign in.
Support level: Pro
Submitted false positive using both my personal and enterprise account.
Thank you, David, much appreciated. It's strange that Microsoft dislikes the .msi files but leaves the .exe Host alone, even though it's essentially the same .msi file wrapped.
Submit a reply

* Website time zone: America/New_York (UTC -4)