NVCleanstall error plus Windows Defender trojan warning

sickhead racing · Mar 24, 2023

Hi, tried updating drivers to the latest driver and I'm getting this error and warning:

I guess the error appears because of Windows blocking stuff...is this a false positive?

Shou Miko · Mar 24, 2023

sickhead racing said:
Hi, tried updating drivers to the latest driver and I'm getting this error and warning:

View attachment 289011

View attachment 289010

I guess the error appears because of Windows blocking stuff...is this a false positive?

What version of Windows are you running? I used it just last week or so on my laptop with a Nvidia GeForce MX 150 2GB on Windows 11 Pro 22H2 without any problems.

I assume you also use the newest version of NVCleanInstall right?

sickhead racing · Mar 24, 2023

Windows 11 21H2 and up to date NVCleanstall trying to update a RTX 2080.

overkongen · Mar 24, 2023

I just had the exact same error, when trying to upgrade to the lastest nvidia driver on a RTX 2080Ti. Win 10 Pro 22H2 and NVcleanstall v1.15.1. I had to disable windows real time virusprotection to get it to work.

fuzzyman · Mar 24, 2023

Exactly the same issue here. Windows 10 Home, latest NVCleanstall. Trying to update laptop 3060 drivers.

Blankedy · Mar 24, 2023

I also have this issue. Same file, Windows is flagging it as `Trojan:Script/Wacatac.H!ml`.

It would be great to get confirmation as to whether this is a false-positive, or if some malware has actually snuck itself inside NVCleanstall.

cbjake · Mar 24, 2023

Same error here, running 22H2 22624.1470. Had NV installed for about 2 months prior to this update notification. Windows Defender blocked but was not providing me the same info as you when I went to check the block history.

W1zzard · Mar 24, 2023

i'm on holiday right now, so I can't double check.

the nvc files are actually zip files that contain the folders of the official nvidia installer separately, so you can download whats needed.

the files are generated by a script that downloads from nv, extracts, and repackages the folders, so i see no way how these got compromised

theozinx · Mar 24, 2023

I am getting the same error.

Selaya · Mar 24, 2023

false positive.
download the entire driver installation archive here and install from disk w/ nvcleaninstall and it won't error out

mainguy29 · Mar 24, 2023

Selaya said:
false positive.
download the entire driver installation archive here and install from disk w/ nvcleaninstall and it won't error out

theozinx said:
I am getting the same error.

thank you it worked on the first attempt

W1zzard · Mar 24, 2023

Selaya said:
false positive.
download the entire driver installation archive here and install from disk w/ nvcleaninstall and it won't error out

good workaround until i have time to submit to microsoft so they confirm false positive

VinceV · Mar 25, 2023

As soon as I download "http://gpu.me/v1/files/531.41-deskt...national-dch-whql/.nvc/Display.Driver.nvz.001" using a browser, Defender quarantines it.

If I plug that URL into VirusTotal, no viruses are detected:

VirusTotal

www.virustotal.com

Definitely seems like a Defender-specific false positive. I have submitted to MS for analysis.

Shou Miko · Mar 25, 2023

VinceV said:
As soon as I download "http://gpu.me/v1/files/531.41-deskt...national-dch-whql/.nvc/Display.Driver.nvz.001" using a browser, Defender quarantines it.

If I plug that URL into VirusTotal, no viruses are detected:

VirusTotal

VirusTotal

www.virustotal.com

Definitely seems like a Defender-specific false positive. I have submitted to MS for analysis.

Hmm my the Security/Defender in my Windows 11 Pro 22H2 OS Build 22621.1413 doesn't find anything wrong with the file on the link it says clean....

VinceV · Mar 25, 2023

I just received notification from Microsoft that they've completed their analysis and removed the false positive. I updated my definitions to 1.385.1125.0 and everything seems to work fine now.

W1zzard · Mar 28, 2023

Thank you so much! Just back from holidays and wanted to work on it. Glad to see it's resolved

AsadAlrafidain · 2024-08-19T04:45:42+0100

I also got an error when tried to install a packaged driver on a fresh windows 11 install, with defender interfering and saying it blocked a trojan horse...all things are up to date.

W1zzard · 2024-08-19T07:52:33+0100

AsadAlrafidain said:
I also got an error when tried to install a packaged driver on a fresh windows 11 install, with defender interfering and saying it blocked a trojan horse...all things are up to date.
View attachment 359640

Just to confirm, you used NVCleanstall to create a driver package exe and named that NVIDIA.exe ? Any special settings? which driver version?

System Name	Lynni PS \ Lenowo TwinkPad L14 G2
Processor	AMD Ryzen 7 7700 Raphael \ i5-1135G7 Tiger Lake-U
Motherboard	ASRock B650M PG Riptide Bios v. 2.02 AMD AGESA 1.1.0.0 \ Lenowo BDPLANAR Bios 1.68
Cooling	Noctua NH-D15 Chromax.Black (Only middle fan) \ Lenowo C-267C-2
Memory	G.Skill Flare X5 2x16GB DDR5 6000MHZ CL36-36-36-96 AMD EXPO \ Willk Elektronik 2x16GB 2666MHZ CL17
Video Card(s)	Asus GeForce RTX™ 4070 Dual OC GPU: 2325-2355 MEM: 1462\| Intel® Iris® Xe Graphics
Storage	Gigabyte M30 1TB\|Sabrent Rocket 2TB\| HDD: 10TB\|1TB \ WD RED SN700 1TB
Display(s)	LG UltraGear 27GP850-B 1440p@165Hz \| LG 48CX OLED 4K HDR \| Innolux 14" 1080p
Case	Asus Prime AP201 White Mesh \| Lenowo L14 G2 chassis
Audio Device(s)	Steelseries Arctis Pro Wireless
Power Supply	Be Quiet! Pure Power 12 M 750W Goldie \| 65W
Mouse	Logitech G305 Lightspeedy Wireless \| Lenowo TouchPad & Logitech G305
Keyboard	Ducky One 3 Daybreak Fullsize \| L14 G2 UK Lumi
Software	Win11 Pro 23H2 UK \| Arch (Fan)
Benchmark Scores	3DMARK: https://www.3dmark.com/3dm/89434432? GPU-Z: https://www.techpowerup.com/gpuz/details/v3zbr

Processor	Ryzen 7 5700X
Memory	48 GB
Video Card(s)	RTX 4080
Storage	2x HDD RAID 1, 3x M.2 NVMe
Display(s)	30" 2560x1600 + 19" 1280x1024
Software	Windows 10 64-bit

Processor	Ryzen 7 5700X
Memory	48 GB
Video Card(s)	RTX 4080
Storage	2x HDD RAID 1, 3x M.2 NVMe
Display(s)	30" 2560x1600 + 19" 1280x1024
Software	Windows 10 64-bit

Processor	Intel Core i9-13900KS
Motherboard	ASUS ROG Maximus Z790 Extreme
Cooling	Lian Li Galahad 360
Memory	G.Skill Trident Z5 RGB 64GB DDR5-6400
Video Card(s)	ASUS ROG Strix GeForce RTX 4090 OC
Storage	Samsung 990 PRO 2TB, Sabrent Rocket 4 Plus 2TB
Display(s)	Samsung 32" Odyssey Neo G7
Case	Lian Li O11 Dynamic EVO (White)
Audio Device(s)	SteelSeries Arctis Pro Wireless
Power Supply	Corsair AX1200i
Mouse	Corsair M65 RGB Elite
Keyboard	Corsair K95 RGB Platinum, Azeron Cyborg
Software	Windows 11 Pro

System Name	Lynni PS \ Lenowo TwinkPad L14 G2
Processor	AMD Ryzen 7 7700 Raphael \ i5-1135G7 Tiger Lake-U
Motherboard	ASRock B650M PG Riptide Bios v. 2.02 AMD AGESA 1.1.0.0 \ Lenowo BDPLANAR Bios 1.68
Cooling	Noctua NH-D15 Chromax.Black (Only middle fan) \ Lenowo C-267C-2
Memory	G.Skill Flare X5 2x16GB DDR5 6000MHZ CL36-36-36-96 AMD EXPO \ Willk Elektronik 2x16GB 2666MHZ CL17
Video Card(s)	Asus GeForce RTX™ 4070 Dual OC GPU: 2325-2355 MEM: 1462\| Intel® Iris® Xe Graphics
Storage	Gigabyte M30 1TB\|Sabrent Rocket 2TB\| HDD: 10TB\|1TB \ WD RED SN700 1TB
Display(s)	LG UltraGear 27GP850-B 1440p@165Hz \| LG 48CX OLED 4K HDR \| Innolux 14" 1080p
Case	Asus Prime AP201 White Mesh \| Lenowo L14 G2 chassis
Audio Device(s)	Steelseries Arctis Pro Wireless
Power Supply	Be Quiet! Pure Power 12 M 750W Goldie \| 65W
Mouse	Logitech G305 Lightspeedy Wireless \| Lenowo TouchPad & Logitech G305
Keyboard	Ducky One 3 Daybreak Fullsize \| L14 G2 UK Lumi
Software	Win11 Pro 23H2 UK \| Arch (Fan)
Benchmark Scores	3DMARK: https://www.3dmark.com/3dm/89434432? GPU-Z: https://www.techpowerup.com/gpuz/details/v3zbr

NVCleanstall error plus Windows Defender trojan warning

sickhead racing

New Member

Shou Miko

sickhead racing

New Member

overkongen

New Member

fuzzyman

New Member

Blankedy

New Member

cbjake

New Member

W1zzard

Administrator

theozinx

New Member

Selaya

mainguy29

New Member

W1zzard

Administrator

VinceV

VirusTotal

Shou Miko

VirusTotal

VinceV

W1zzard

Administrator

AsadAlrafidain

New Member

W1zzard

Administrator