Trojan:Script/Cloxer.A!cl in 2018.1.2
After the recent update windows defender is complaining about a "Trojan:Script/Cloxer.A!cl" (https://go.microsoft.com/fwlink/?linkid=142185&name=Trojan:Script/Cloxer.A!cl&threatid=2147725998) in C:\Users\<USERNAME>\AppData\Local\JetBrains\Toolbox\apps\WebStorm\ch-0\181.4668.60\jre64\lib\management-agent.jar
Throwing the file at virus total shows its clean
I'm assuming this is just a false positive, would still be good if it could be looked at though
Please sign in to leave a comment.
It's a false alert, we are trying to contact Microsoft to whitelist the file signature: https://youtrack.jetbrains.com/issue/JRE-731.
2018-05-08 just updated and still got the message from windows defender.
I just updated WebStorm to 2018.1.3 on 2018-05-09 and Windows Defender flagged and quarantined 2 "Trojan:Script/Cloxer.A!cl" threats.
file: C:\Users\<USERNAME>\AppData\Local\Temp\idea.updater.files.703708103498867609\management-agent.jar.tmp.0
file: C:\Users\<USERNAME>\AppData\Local\JetBrains\Toolbox\apps\WebStorm\ch-0\181.4892.44\jre64\lib\management-agent.jar
Please see my comment above. This is a false alarm, we 've already asked Microsoft to whitelist the file signature.
The file itself is just a packed MANIFEST file with the following content and can't be a trojan.
Manifest-Version: 1.0
Created-By: 1.7.0_07 (Oracle Corporation)
Agent-Class: sun.management.Agent
Premain-Class: sun.management.Agent
To work out the problem, please try adding an exclusion https://support.microsoft.com/en-us/help/4028485/windows-10-add-an-exclusion-to-windows-defender-antivirus