Windows 10: Overly eager heuristics for Trojan:Win32/Wacatac.B!ml ?

I'm a software developer and one of my custom tools a text editor has been repeatedly flagged as Trojan:Win32/Wacatac.B!ml .As an one-off I can understand false positives I'm a member of the demoscene where we squeeze down programs and sadly malware authors usually take our tools causing a bunch of false positives.However this false positive wasn't on any obfuscated build in fact it was on a debug build!, and seeing from other posts to this forum it seems to happen every once in a while for various developers using MS tools? so the heuristics seems to target MS own libraries or smth al

:)

 

what is Trojan:Win32/Wacatac.G!ml

Wacatac (also known as Trojan:Win32/Wacatac)
is a trojan-type infection that stealthily infiltrates computers and performs a number of malicious actions. Cyber criminals typically proliferate this malware using spam email campaigns
and fake software 'cracks'.

Windows Defender would mention the potential threat to you but it is up to you to delete it altogether from the system. Currently, if the Virus is in the Quarantine and you can delete it from there.

 

what is Trojan:Win32/Wacatac.G!ml

hello well i noticed my windows were updated 24 and i got infected 25th, but do you know why it has different letters because i would like to know if this trojan win32 wacatac G ml do take my personal files such as recording pictures? would you be able
to see that also on the event log?

 

Virus Trojan:32/Wacatac.DC!ml not completely remediated on Windows PC

This is a "Backdoor" trojan. Read about it here: Trojan:Win32/Wacatac.D!ml - Virus Lists and Removal Steps

These are the most dangerous, and most widespread, type of Trojan.

Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.

If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.

Banking and credit card institutions should be notified of the possible security breech.