[GH-ISSUE #2046] Windows Defender 报毒Worm:Win32/Yuner.A #1629

Closed
opened 2026-05-05 13:02:26 -06:00 by gitea-mirror · 7 comments
Owner

Originally created by @oO0oO0oO0o0o00 on GitHub (Nov 2, 2020).
Original GitHub issue: https://github.com/fatedier/frp/issues/2046

What version of frp are you using (./frpc -v or ./frps -v)?
.\frpc.exe -v 0.33.0

What operating system and processor architecture are you using (go env)?
Windows 10 2004
Not using Golang

Steps to reproduce the issue:

  1. frpc -c frpc.ini;
  2. Created startup shortcut in shell:startup;
  3. It ran for ~1 month and eventually got deleted by Windows Defender.

Describe the results you received:
Detected as Worm:Win32/Yuner.A

Describe the results you expected:
N/A

Additional information you deem important (e.g. issue happens only occasionally):
N/A

Can you point out what caused this issue (optional)
Microshit is a piece of soft.

Originally created by @oO0oO0oO0o0o00 on GitHub (Nov 2, 2020). Original GitHub issue: https://github.com/fatedier/frp/issues/2046 **What version of frp are you using (./frpc -v or ./frps -v)?** `.\frpc.exe -v` 0.33.0 **What operating system and processor architecture are you using (`go env`)?** Windows 10 2004 Not using Golang **Steps to reproduce the issue:** 1. `frpc -c frpc.ini`; 2. Created startup shortcut in `shell:startup`; 3. It ran for ~1 month and eventually got deleted by Windows Defender. **Describe the results you received:** Detected as `Worm:Win32/Yuner.A` **Describe the results you expected:** N/A **Additional information you deem important (e.g. issue happens only occasionally):** N/A **Can you point out what caused this issue (optional)** Microshit is a piece of soft.
Author
Owner

@fatedier commented on GitHub (Nov 2, 2020):

https://github.com/fatedier/frp/issues/1204

<!-- gh-comment-id:720424070 --> @fatedier commented on GitHub (Nov 2, 2020): https://github.com/fatedier/frp/issues/1204
Author
Owner

@devmolv commented on GitHub (Nov 2, 2020):

同0.33版本报毒,exe文件被删除了

<!-- gh-comment-id:720450883 --> @devmolv commented on GitHub (Nov 2, 2020): 同0.33版本报毒,exe文件被删除了
Author
Owner

@ErixWong commented on GitHub (Nov 3, 2020):

Operation System Edition: Windows 10 Pro
Operation System Version: 2004 (OS Build 19041.572)
Security Intelligence update: 11/2/2020
Threats: Worm:Win32/Yuner.A

<!-- gh-comment-id:720806120 --> @ErixWong commented on GitHub (Nov 3, 2020): Operation System Edition: Windows 10 Pro Operation System Version: 2004 (OS Build 19041.572) Security Intelligence update: 11/2/2020 Threats: Worm:Win32/Yuner.A
Author
Owner

@wuqiangcpp commented on GitHub (Nov 3, 2020):

same problem.

<!-- gh-comment-id:720862052 --> @wuqiangcpp commented on GitHub (Nov 3, 2020): same problem.
Author
Owner

@SuperXiaoxiong commented on GitHub (Nov 3, 2020):

I also met the problem
maybe the us-cert report https://us-cert.cisa.gov/ncas/analysis-reports/ar20-259a

<!-- gh-comment-id:720905153 --> @SuperXiaoxiong commented on GitHub (Nov 3, 2020): I also met the problem maybe the us-cert report https://us-cert.cisa.gov/ncas/analysis-reports/ar20-259a
Author
Owner

@fatedier commented on GitHub (Nov 3, 2020):

https://github.com/fatedier/frp/issues/2003
https://github.com/fatedier/frp/issues/1989
https://github.com/fatedier/frp/issues/1829
https://github.com/fatedier/frp/issues/1827
https://github.com/fatedier/frp/issues/1719
https://github.com/fatedier/frp/issues/1204

提问前先搜索历史 issue,不要再重复的创建完全重复的 issue,每次要重复回答一遍很累。#1204 中是最开始的回复,基本上就是原因。

https://golang.org/doc/faq#virus

<!-- gh-comment-id:720919285 --> @fatedier commented on GitHub (Nov 3, 2020): https://github.com/fatedier/frp/issues/2003 https://github.com/fatedier/frp/issues/1989 https://github.com/fatedier/frp/issues/1829 https://github.com/fatedier/frp/issues/1827 https://github.com/fatedier/frp/issues/1719 https://github.com/fatedier/frp/issues/1204 提问前先搜索历史 issue,不要再重复的创建完全重复的 issue,每次要重复回答一遍很累。#1204 中是最开始的回复,基本上就是原因。 https://golang.org/doc/faq#virus
Author
Owner

@yangguangwuwu commented on GitHub (Dec 1, 2020):

我是今天 报的 昨天 还没 腾讯管家 报 的
0.33版本报毒

<!-- gh-comment-id:736152575 --> @yangguangwuwu commented on GitHub (Dec 1, 2020): 我是今天 报的 昨天 还没 腾讯管家 报 的 0.33版本报毒
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#1629
No description provided.