Summary

Microsoft Defender Antivirus alerts triggered by false positive finding in ReleasePackager.exe utility. Users should update their Microsoft Defender Antivirus definitions to remove these alerts.

Symptoms

Microsoft Defender Antivirus is flagging InstallShield ReleasePackager.exe as containing malware [Trojan:Win32/NetSupportRat.CCC!MTB]. This is being reported against InstallShield versions 2022, 2021, and 2020.

Microsoft confirmed the triggered alerts are a false positive finding and are updating their database to no longer flag ReleasePackager.exe.

Please note while the ReleasePackager.exe file is quarantined in the interim, usage of InstallShield IDE should not be affected. The ReleasePackager.exe is a standalone utility and usage is typically limited; however, if you encounter issues with using the utility, reach out to Revenera Technical Support for assistance.

The InstallShield team is working with Microsoft Defender to gather more details and minimize false positive triggers in the future.

Fix Version and Resolution

We advise updating your Microsoft Defender Antivirus definitions to the latest.