PLLATINUMSIM-SW: Recognized as Trojan by Windows Defender

Hello Mago-san,

This is a false detection. 

Microsoft update added an incorrect definition for OneevaA!ml which aggressively flags files that have packed binary data (such as our database of devices), and several other commercial software programs are being flagged alongside us – a quick search for “Oneeva.a!ml false positive” reveals many programs that have also been falsely flagged in the last year. We obviously aren’t attaching trojans to our software.

For the record, PLLatinum Sim installer does the following:

• Adds the PLLatinumSim.exe binary to your program files directory
• Unpacks the PLLatinumSimDevices.dat file, which is a compressed XML database of our devices
• Unpacks the license file and the software manifest
• Creates the uninstaller
• In case a previous edition of PLLatinum Sim existed on the machine, loads it to the rollback directory in the install path.
• Adds shortcuts (if requested).

We compile the executable, build the installer file, and package it in a zip file for distribution through TI.com – we control every step of the process. The current version of the installer we uploaded to TI.com (1.5.6) has MD5 checksum eb4228add3d5b074fc8b88984908d438. You can verify for yourself that your downloaded copy has the correct checksum, to ensure that no other party has tampered with the program. There are a number of ways to do this, but the most straightforward is using the Microsoft File Checksum Integrity Verifier: https://www.microsoft.com/en-us/download/details.aspx?id=11533

1. Download and extract the checksum verifier program (fciv.exe) to some location
2. From the directory where fciv.exe is extracted, run fciv from command line. Example is below for my test case, in which I extracted fciv to my desktop.

Regards,