INTERACT FORUM

More => Old Versions => JRiver Media Center 24 for Windows => Topic started by: jvandeven on November 30, 2018, 01:12:08 pm

Title: Bitdefender identifying JRiver as ransomware
Post by: jvandeven on November 30, 2018, 01:12:08 pm

I just received a new warning from Bitdefender, identifying JRiver as ransomware, after the application encrypted a range of files.  After the hack earlier this year, I am worried that this is not a mis-direct; the files are in a range of directories, including: AppData\local\Microsoft\Windows\INetCache\IE\ and AppData\Roaming\J River\Media Center 24\

One of the files is Analyze - 15136.xml

Can you please confirm that this is normal behaviour for JRiver, so that I can resolve this situation?

Thanks.

Title: Re: Bitdefender identifying JRiver as ransomware
Post by: Awesome Donkey on November 30, 2018, 01:19:11 pm

*sigh*

Bitdefender strikes again! You might want to contact Bitdefender if you can and tell them about this false positive. Yes, this is a false positive.

Honestly, every once in awhile I keep reading things about issues Bitdefender causes, including the ntdll.dll issues. Once upon a time Bitdefender was pretty good, but these days I won't recommend it to anyone.

Title: Re: Bitdefender identifying JRiver as ransomware
Post by: jvandeven on November 30, 2018, 01:21:37 pm

Thanks for the reply Awesome - do you know whether JRiver typically encrypts the types of files listed in my post?

Title: Re: Bitdefender identifying JRiver as ransomware
Post by: Awesome Donkey on November 30, 2018, 01:22:35 pm

If it says Analyze in the filename, it's probably related to audio analysis, at least that's my guess.

Title: Re: Bitdefender identifying JRiver as ransomware
Post by: Hendrik on November 30, 2018, 01:40:19 pm

Those temporary files are not encrypted. But its also just a temporary file, MC writes it, reads it, and deletes it. Its contents are transient at best. That some tool would trigger such a warning on a file in a temporary directory is mind boggling already.

Title: Re: Bitdefender identifying JRiver as ransomware
Post by: Awesome Donkey on November 30, 2018, 02:00:24 pm

Never heard of a XML file being flagged as ransomware either.