# urc.exe and urc.dll get flagged as Malware from Microsoft Defender 

**URL:** <https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519>\
**Category:** Issues and Bug Reporting\
**Tags:** fortnite-creative, unreal-editor-for-fortnite, fortnite\
**Created:** [April 13, 2024, 9:48pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519 "2024-04-13T21:48:25Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![tosho](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@tosho](https://forums.unrealengine.com/u/tosho)\
**Post date:** [April 13, 2024, 9:48pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/1 "2024-04-13T21:48:26Z")

</div>

### Please select what you are reporting on:

Unreal Editor for Fortnite

### What Type of Bug are you experiencing?

Assets

### Summary

I’ve installed UEFN like a day ago. I was able to try the editor and play a tutorial project. Today I get a message from Microsoft Defender that it found a threat - urc.exe and urc.dll - as Agent Tesla RAT.  
I didn’t have such a threat before. Could be this a false positive or it really got infected (and why exactly urc.exe)

### Steps to Reproduce

idk

### Expected Result

idk

### Observed Result

idk

### Platform(s)

Windows 10 x64 PRO

---

<div class="post-metadata">

**Author:** ![Jimbohalo10](https://d1ap1mz92jnks1.cloudfront.net/user_avatar/forums.unrealengine.com/jimbohalo10/32/961440_2.png) [@Jimbohalo10](https://forums.unrealengine.com/u/Jimbohalo10)\
**Post date:** [April 14, 2024, 2:57am UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/2 "2024-04-14T02:57:00Z")

</div>

> [@tosho](#):
>
> urc.exe

hi open Windows Security select Virus & threat protection

 ![UEFNVirusOpenPageException](https://d3kjluh73b9h9o.cloudfront.net/original/4X/c/7/a/c7a040e73aa2a7fd0c86ea3bf4a1bd5fead53f39.png)

Select Scroll down to Exceptions

 ![UEFNVirusPageException](https://d3kjluh73b9h9o.cloudfront.net/original/4X/0/e/0/0e024467186ba3b901781f19099b4bf3fa1e9212.png)

 ![UEFNVirusException](https://d3kjluh73b9h9o.cloudfront.net/original/4X/7/3/b/73b321b0f9431b1eb3341c5c1898f0479c2932ab.png)

add the Unreal Fornite binary

 ![UEFNVirusException](https://d3kjluh73b9h9o.cloudfront.net/original/4X/7/3/b/73b321b0f9431b1eb3341c5c1898f0479c2932ab.png)

the same happened .Put urc.exe Unreal Revision Control to excluded list

 ![windefExclude](https://d3kjluh73b9h9o.cloudfront.net/original/4X/7/5/0/7505bf0dd9d48531be31989921c2a8cd90698554.png)  
urc.dll does not exist in Fortnite on my system

[now verify using post 6](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/5)

---

<div class="post-metadata">

**Author:** ![Punkcat](https://d1ap1mz92jnks1.cloudfront.net/user_avatar/forums.unrealengine.com/punkcat/32/1191421_2.png) [@Punkcat](https://forums.unrealengine.com/u/Punkcat)\
**Post date:** [April 14, 2024, 8:11pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/3 "2024-04-14T20:11:19Z")

</div>

Same here. Windows Defender silently quarantined the file.

The effect in UEFN:

- Cannot save
- Cannot connect to revision control

---

<div class="post-metadata">

**Author:** ![IsYaXenoBoi](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@IsYaXenoBoi](https://forums.unrealengine.com/u/IsYaXenoBoi)\
**Post date:** [April 14, 2024, 10:44pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/4 "2024-04-14T22:44:45Z")

</div>

They said the solution is to update Windows Defender. After updating Windows Defender nothing happened, still can’t save or connect to revision control. Now I have to keep waiting for UEFN to Auto-Save just so I can save all the changes I made.

---

<div class="post-metadata">

**Author:** ![Jimbohalo10](https://d1ap1mz92jnks1.cloudfront.net/user_avatar/forums.unrealengine.com/jimbohalo10/32/961440_2.png) [@Jimbohalo10](https://forums.unrealengine.com/u/Jimbohalo10)\
**Post date:** [April 15, 2024, 4:15am UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/5 "2024-04-15T04:15:08Z")

</div>

hi all,  
You need to verify the UEFN app after adding the Windows Defender Exception  
to replace the broken urc.exe and check the other files

 ![FortniteUEFNverify0](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/6/b/26b3144deecf78e05b04d55571154e6c8fa27adc.jpeg)  
open Launcher click Library  
 ![FortniteUEFNverify1](https://d3kjluh73b9h9o.cloudfront.net/original/4X/e/b/6/eb68eff817711ce3fafa8e3bedbd893b24d6d6b4.jpeg)  
click dots  
 ![FortniteUEFNverify2](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/4/3/24387055f997fc684f3084467d576fcd03cc2abc.png)

 ![FortniteUEFNverify3](https://d3kjluh73b9h9o.cloudfront.net/original/4X/9/7/2/972cf3c3c085bcc1212840122f65fd631eddabad.png)  
**THEN WAIT ABOUT 8 MINUTES FOR VERIFYING TO COMPETE**

Now do the same procedure again for Fortnite

---

<div class="post-metadata">

**Author:** ![Bug-Reporter](https://d1ap1mz92jnks1.cloudfront.net/user_avatar/forums.unrealengine.com/bug-reporter/32/997076_2.png) [@Bug-Reporter](https://forums.unrealengine.com/u/Bug-Reporter)\
**Post date:** [April 15, 2024, 5:23pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/6 "2024-04-15T17:23:38Z")

</div>

The status of FORT-732542 incident has been moved from ‘Unconfirmed’ to ‘Needs Triage’.

---

<div class="post-metadata">

**Author:** ![IsYaXenoBoi](https://d3kjluh73b9h9o.cloudfront.net/original/4X/2/8/5/28502927f1d97ba1051b3b47ccfe17233bf41ef0.png) [@IsYaXenoBoi](https://forums.unrealengine.com/u/IsYaXenoBoi)\
**Post date:** [April 15, 2024, 11:06pm UTC](https://forums.unrealengine.com/t/urc-exe-and-urc-dll-get-flagged-as-malware-from-microsoft-defender/1802519/7 "2024-04-15T23:06:22Z")

</div>

Hey there, thank you so much for the tip. My UEFN is now connected to revision control and I’m now able to save!
