D_curl.exe in DataClay folder being flagged as Ymacco Trojan by Windows Defender
-
Windows Security keeps flagging C:\ProgramData\Dataclay\D_curl.exe as a potentially unwanted app since recently reinstalling Templater.
D_curl.exe in DataClay folder being flagged as Ymacco Trojan by Windows Defender
Is this a false positive or being infected from elsewhere? It’s the only file causing the flag.
Any help is appreciated.
-
Hello!
D_curl.exe is the part of Templater that transmits and receives data during the reversioning process. That can potentially set off some virus and malware scanners that misidentify the component as some sort of malware or ransomware. However, we’ve been digitally signing our utility executables for a while now, so we wouldn’t typically expect this to be the case with the latest versions of the plugin.
Which version of Templater are we running that’s giving us that error? If it’s an earlier version, you should be able to disregard those notifications from Windows Defender. If it’s a newer version, let us know, and we’ll look into it to see if we can keep this behavior from manifesting in future versions.
Thanks,
Jeff
-
A quick update on this. Our engineering staff informed me that we removed D_curl.exe a few versions back when we switched over to a new authentication method. If you need the latest version of Templater, you can download 3.3.3 from this link:
If you need the Legacy version of Templater for AE 2021 or earlier, you can grab that here:
Hopefully, that should resolve any security issues with Windows Defender, but if you have any other problems or questions, please don’t hesitate to get in touch.
Thanks,
Jeff
-
Hi @Jeff thanks for the quick reply.
As far as I know, I am using the latest version - certainly “Templater 3”. I will delete D_curl.exe and report back with any updates.
Kind regards.
-
@UncleMonty To follow on Jeff’s replies, in case you are using an earlier version of Templater 3, it’s recommended to run the Templater uninstaller and download and install Templater from one of those links he provided. The zip names are going to be the same, but the contents will be different—which is why you’ll want to install from a fresh download.
