Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8168306

Iconswap program used by the packager is flagged as malware by Windows Defender

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P1
    • 9
    • 8u112, 9
    • deploy
    • windows_10
    • Verified

    Description

      After upgrading to 8u112 on Windows 10 my build failed with the message:

      Exception: java.io.IOException: Cannot run program "C:\Users\spalmer\AppData\Local\Temp\iconswap2930071229376508731.exe": CreateProcess error=225, Operation did not complete successfully because the file contains a virus or potentially unwanted software

      There was a popup from Windows Defender indicating that it stopped a threat. Checking the details in the Windows Defender UI I found that it identified the iconswap program and the launcher.exe that it was trying to swap the icon into as:
      Trojan:Win32/Detplock
      Trojan:Win32/Repjexi

      The description of the threat merely says something along the lines of "this program does stuff that malware often does" - which I guess is technically correct as it is modifying an exe file.

      The issue may be with Windows Defender, but perhaps Microsoft can be notified to whitelist this application.

      When I explicitly selected "Allow Item" in Windows Defender for each of the listed threats (two temp copies of iconswap and the destination launcher.exe were listed) the next build succeeded.

      I can't be sure if 8u112 introduced the problem or if I forgot that I whitelisted the files from my older JDK.

      Attachments

        Issue Links

          Activity

            People

              cbensen Chris Bensen (Inactive)
              swpalmer Scott Palmer
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: