More > JRiver Media Center 32 for Windows
Windows Defender Problems with MC32.0.20
Cinelder:
--- Quote from: JimH on February 22, 2024, 07:09:37 am ---We think that the Microsoft problems with false positives from antivirus should be done now.
There is another current Microsoft problem that is unrelated. We changed our digital certificate about a month ago and the Edge browser is still sometime suspicious of it. This should go away over time.
--- End quote ---
Microsoft Defender reported finding the trojan: script/wacatac.b!ml after installing MC 32.0.20 yesterday and reports it as "severe".
Trying any of the options in Defender to remove/quarantine doesn't result in any action.
Manually running Microsoft Safety Scanner finds no infection. Neither does temporarily instaling and running Malwarebytes or Sophos - they also show no infection. However, as soon as I uninstall either of them, and revert to Windows Defender, Windows Defender still reports the same malware in the same location as a threat. I've tried manually clearing the Defender log in Event Viewer and restarting. Doesn't make the message go away. Microsoft Defender reports that "Everything Looks Good". It does report finding the trojan in C:\Program Files\J River\Media Center 32\Media Center 32.exe in History.
FWIW, I think/hope it's a false positive. The folder reported by Defender showing the infection "C:\Users\Username\AppData\Local\Temp\7zSC0AE1E90\Media Jukebox\Media Center 32.exe" does not appear to exist. Perhaps that's why neither "Quarantine" or "Remove" do anything when either is selected as actions in Defender.
I don't want to choose "Allow On Device" in case that prevents Defender protection if it finds Trojan:Script/Wacatac.b!ml in the future or if I'm wrong about it being a false positive.
Awesome Donkey:
Check for Defender definition updates in Windows Update, it should be fine now.
Cinelder:
--- Quote from: Awesome Donkey on February 23, 2024, 02:45:59 pm ---Check for Defender definition updates in Windows Update, it should be fine now.
--- End quote ---
Thanks, AD. I've installed the latest Defender updates as of today. While that may address current and future MC 32 installations, it doesn't seem to be of any help in getting rid of the threat alert in Defender after installing MC 32.0.20 yesterday.
I looked again at the last entry in the Defender log in Event Viewer. The log (after the updated Defender definitions) indicated that Defender had quarantined the trojanscript wacatac.b!ml, but at the end of the entry was an error message reporting that the folder/file couldn't be located.
If JRiver, Defender, Microsoft Safety Scanner, Malwarebytes and Sophos (aka Hitman Pro) all say there's nothin' to see here, folks, I believe 'em.
I'd just really, really like to get rid of the persistent and apparently spurious threat alert, which I can't help but see in the taskbar notification area.
milsdrewbulch:
pls delete. sorry posted in wrong thread
Navigation
[0] Message Index
[*] Previous page
Go to full version