INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: Bitdefender identifying JRiver as ransomware  (Read 753 times)

jvandeven

  • Recent member
  • *
  • Posts: 14
Bitdefender identifying JRiver as ransomware
« on: November 30, 2018, 01:12:08 pm »

I just received a new warning from Bitdefender, identifying JRiver as ransomware, after the application encrypted a range of files.  After the hack earlier this year, I am worried that this is not a mis-direct; the files are in a range of directories, including: AppData\local\Microsoft\Windows\INetCache\IE\ and AppData\Roaming\J River\Media Center 24\

One of the files is Analyze - 15136.xml

Can you please confirm that this is normal behaviour for JRiver, so that I can resolve this situation?

Thanks.
Logged

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7398
  • The color of Spring...
Re: Bitdefender identifying JRiver as ransomware
« Reply #1 on: November 30, 2018, 01:19:11 pm »

*sigh*

Bitdefender strikes again! You might want to contact Bitdefender if you can and tell them about this false positive. Yes, this is a false positive.

Honestly, every once in awhile I keep reading things about issues Bitdefender causes, including the ntdll.dll issues. Once upon a time Bitdefender was pretty good, but these days I won't recommend it to anyone.
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2023 Update (23H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2023 Update (23H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/256GB NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | Edifier R2000DB Bookshelf Speakers | Audio-Technica ATH-M50x Headphones

jvandeven

  • Recent member
  • *
  • Posts: 14
Re: Bitdefender identifying JRiver as ransomware
« Reply #2 on: November 30, 2018, 01:21:37 pm »

Thanks for the reply Awesome - do you know whether JRiver typically encrypts the types of files listed in my post?
Logged

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7398
  • The color of Spring...
Re: Bitdefender identifying JRiver as ransomware
« Reply #3 on: November 30, 2018, 01:22:35 pm »

If it says Analyze in the filename, it's probably related to audio analysis, at least that's my guess.
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2023 Update (23H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2023 Update (23H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/256GB NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | Edifier R2000DB Bookshelf Speakers | Audio-Technica ATH-M50x Headphones

Hendrik

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 10723
Re: Bitdefender identifying JRiver as ransomware
« Reply #4 on: November 30, 2018, 01:40:19 pm »

Those temporary files are not encrypted. But its also just a temporary file, MC writes it, reads it, and deletes it. Its contents are transient at best. That some tool would trigger such a warning on a file in a temporary directory is mind boggling already.
Logged
~ nevcairiel
~ Author of LAV Filters

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7398
  • The color of Spring...
Re: Bitdefender identifying JRiver as ransomware
« Reply #5 on: November 30, 2018, 02:00:24 pm »

Never heard of a XML file being flagged as ransomware either.
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2023 Update (23H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2023 Update (23H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/256GB NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | Edifier R2000DB Bookshelf Speakers | Audio-Technica ATH-M50x Headphones
Pages: [1]   Go Up