[Interest] Issues with latest Qt MaintenanceTool and Kaspersky

[Kai Köhne]

Hi,

> Are deferredrenamekERbOS.vbs and deferredrenameQIoNFA.vbs included in the MaintenanceTool package?

They are not _included_ in the MaintenanceTool package. Anyhow, "deferredrenameXXXXXX.vbs”are temporary files the MaintenaceTool.exe writes to schedule an update of itself. That is, because on Windows an executable cannot be replaced when it is running, the MaintenanceTool.exe

  *   Saves the new MaintenanceTool.exe in parallel
  *   Writes above .vbs file, and starts it
  *   Stops itself

The .vbs script will then every second try to replace the original .exe file, and – after being successful – restarting the MaintenanceTool.


Why Kaspersky now starts to complain about it: No idea :/ Anyhow, we had false positives about the MaintenanceTool before, the best process to fix it is probably to report the false positive to Kaspersky: https://support.kaspersky.com/viruses/answers/1870 . Would you like to do that (since you still have the temporary files, I assume)?

Regards

Kai

Von: Interest <interest-bounces at qt-project.org> Im Auftrag von Nibedit Dey
Gesendet: Dienstag, 3. Mai 2022 22:06
An: development at qt-project.org; interest at qt-project.org
Betreff: [Interest] Issues with latest Qt MaintenanceTool and Kaspersky

Hello Qt Team,

I just ran the updater using the MaintenanceTool. After the update, the MaintenanceTool got listed as malware by Kaspersky Anti-Virus and removed from the system.
Refer to the screenshot below:
[cid:image001.png at 01D85F92.23A1F470]

[cid:image002.png at 01D85F92.23A1F470]

I have been using both Qt and KAV together for the last several years without any issues.
Are deferredrenamekERbOS.vbs and deferredrenameQIoNFA.vbs included in the MaintenanceTool package?
Why suddenly did the anti-virus start listing it as malware? Has anyone else observed this?

Thanks & Regards,
Nibedit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20220504/ecf886c6/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 39052 bytes
Desc: image001.png
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20220504/ecf886c6/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 44054 bytes
Desc: image002.png
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20220504/ecf886c6/attachment-0003.png>