# Wacatac trojan found in Processing Windows x64 download

**URL:** <https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297>\
**Category:** Site Feedback\
**Created:** [August 10, 2022, 5:38pm UTC](https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297 "2022-08-10T17:38:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![IMLXH](https://avatars.discourse-cdn.com/v4/letter/i/4da419/32.png) [@IMLXH](https://discourse.processing.org/u/IMLXH)\
**Post date:** [August 10, 2022, 5:38pm UTC](https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297/1 "2022-08-10T17:38:04Z")

</div>

Yesterday I tried to download Processing onto my new PC, only to have Windows tell me that Windows Defender had quarantined the Wacatac trojan horse in Processing’s core.jar file. I highly doubt the Processing Foundation would knowingly send its users malware, so I attempted to email the Foundation about the issue, but all I got back was a form letter sending me to the forums.

I don’t know if issue this goes in “Site Feedback”, but it honestly seems like a more important issue than a form letter can address. I don’t know how often the web team checks these forums, and I just made an account in order to post this. Has anyone else been getting infected downloads?

 ![image](https://canada1.discourse-cdn.com/flex036/uploads/processingfoundation1/original/3X/f/8/f8167e13ffc8fe4f311fb55c4641163e9849c1ca.png)

---

<div class="post-metadata">

**Author:** ![glv](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/glv/32/18785_2.png) [@glv](https://discourse.processing.org/u/glv)\
**Post date:** [August 10, 2022, 6:06pm UTC](https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297/2 "2022-08-10T18:06:43Z")

</div>

Hello,

Related topic:

> [@My Processing 4.0 will not open](https://discourse.processing.org/t/my-processing-4-0-will-not-open/35359/4):
>
> I just had this issue with beta 9, and your solution worked for me. Thanks!

This has happed to me a few times before and I restore it after testing it.

`:)`

---

<div class="post-metadata">

**Author:** ![jafal](https://yyz2.discourse-cdn.com/flex036/user_avatar/discourse.processing.org/jafal/32/19112_2.png) [@jafal](https://discourse.processing.org/u/jafal)\
**Post date:** [August 10, 2022, 11:20pm UTC](https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297/3 "2022-08-10T23:20:40Z")

</div>

> [@IMLXH](#):
>
> Windows tell me that Windows Defender had quarantined the Wacatac trojan horse in Processing’s core.jar file. I highly doubt the Processing Foundation would knowingly send its users malware,

Hi

Some of antivirus software do this while installing .jar files

Same happened while downloading installing Android Studio

---

<div class="post-metadata">

**Author:** ![IMLXH](https://avatars.discourse-cdn.com/v4/letter/i/4da419/32.png) [@IMLXH](https://discourse.processing.org/u/IMLXH)\
**Post date:** [August 11, 2022, 7:12pm UTC](https://discourse.processing.org/t/wacatac-trojan-found-in-processing-windows-x64-download/38297/4 "2022-08-11T19:12:33Z")

</div>

That’s weird. I took a class on Android Studio a few months ago (though I was using a different PC then) and I didn’t have anything like this happen.

That said, I just tried to google “Wacatac” and one of the first searches that came up was “wacatac false positive”, so apparently this is a [fairly common thing](https://www.reddit.com/r/antivirus/comments/q9wawg/wacatac_trojan_found_is_this_a_false_positive/) to happen? Thanks for the heads up on this, good to know the foundation’s servers haven’t been compromised.