INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: Bit Defender Reporting JRiver Is Infected  (Read 1229 times)

David M.

  • Recent member
  • *
  • Posts: 15
Bit Defender Reporting JRiver Is Infected
« on: August 06, 2023, 03:12:06 am »

Good Morning,
I am getting repeated warning and 'blocks' to JRiver this morning.  It hasn't happened before.  Bit Defender has isolated a driver and when I try to restore it, I am blocked from doing so.

I then get the below message when I open JRiver.

Has anyone else had this problem?  I'm assuming a false positive, but you can't be too careful these days.

We blocked this dangerous page for your protection:
https://files.jriver-cdn.com/
Accessed by: Media Center 31.exe
Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

Any comments would be helpful, as I would like to use JRiver and currently I am getting Bit Defender messages about an infection!

Another warning :- The file C:\Program Files\J River\Media Center 31\Drivers\JRiverASIODriver64.dll has been detected as infected with Gen:Suspicious.Cloud.4.Gy4@aGO!FHb and Bitdefender could not clean this item. A device restart is required to finalize the cleaning proc

I am getting messages, I've never received before regarding security of JRiver.  I'm convinced it's a false positive but I keep getting prompts from Bit Defender!
Logged

EnglishTiger

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 987
Re: Bit Defender Reporting JRiver Is Infected
« Reply #1 on: August 06, 2023, 03:14:56 am »

It's a false positive but you should only ever use Windows Defender
Logged
Win NUC - VENOEN 11Th NUC Mini PC Core i7 1165G7,Dual HDMI 2.0+Mini DP,Windows 11 Mini Desktop Computer,Thunderbolt 4.0,1 Lan, USB-C,Wifi,Bluetooth 5.0,32GB RAM Toshiba MQ04ABF100 ‎500Gb 5400 RPM ‎eSATA HD, Gigabyte GP-GSM2NE3512GNTD 1Tb NVMe SSD, Samsung 870 QVO 8 TB SATA 2.5 Inch SSD (MZ-77Q8T0) in Sabrent Ultra Slim USB 3.0 to 2.5-Inch SATA External Aluminium Hard Drive Enclosure (EC-UK30)

Apple 2020 Mac mini M1 Chip (8GB RAM, 512GB SSD)
Sabrent Thunderbolt 3 to Dual NVMe M.2 SSD Tool-Free Enclosure with Sabrent 2TB Rocket NVMe PCIe M.2 2280 High Performance SSD + Crucial P3 Plus 4TB M.2 PCIe

ET Skins & TrackInfo Plugins - https://englishtiger.uk/index.html

David M.

  • Recent member
  • *
  • Posts: 15
Re: Bit Defender Reporting JRiver Is Infected
« Reply #2 on: August 06, 2023, 03:20:48 am »

Hi English Tiger,

I use a paid for anti-virus because Windows Defender has let me down in the past and I got infected, even though Defender said I was safe. 
I will have the computer doubled checked with another anti-virus I have to have installed for banking purposes (part of their deal).
Logged

David M.

  • Recent member
  • *
  • Posts: 15
Re: Bit Defender Reporting JRiver Is Infected
« Reply #3 on: August 06, 2023, 03:51:52 am »

I have sent emails to Bit Defender Support regarding these possible false positives.
Currently I cannot use JRiver without I get nag screens over the program with warning of infection.
This has never happened before with JRiver and I continue to suspect it's a false positive.
Logged

JimH

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 71663
  • Where did I put my teeth?
Re: Bit Defender Reporting JRiver Is Infected
« Reply #4 on: August 06, 2023, 04:09:15 am »

Uninstall Bitdefender and use only Windows Defender. 

Bitdefender has caused more than a few problems:  https://yabb.jriver.com/interact/index.php?topic=86096
Logged

DaveMan538

  • Recent member
  • *
  • Posts: 26
  • So much good music. So little time...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #5 on: August 06, 2023, 07:36:11 am »

In all the years I've had JRiver, I've never had my security system block an install.  Until just now.  Thought the good folks at JRiver would want to know. See attached screenshot....
Logged

David M.

  • Recent member
  • *
  • Posts: 15
Re: Bit Defender Reporting JRiver Is Infected
« Reply #6 on: August 06, 2023, 08:00:22 am »

Hello Jim H
Yoiu have reports of infected files from another source.

I will not replace a market leading anti-virus software for free security software that has let me down in the past.

Please chechk the other report of infected files.
Logged

JimH

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 71663
  • Where did I put my teeth?
Re: Bit Defender Reporting JRiver Is Infected
« Reply #7 on: August 06, 2023, 08:35:45 am »

There is a web site where you can do that, but I'm certain this isn't a JRiver problem.

Windows Defender is excellent.  It wasn't great in the first year or two when it was offered.
Logged

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7466
  • When Summer comes...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #8 on: August 06, 2023, 08:41:18 am »

I will not replace a market leading anti-virus software for free security software that has let me down in the past.

Nothing is infallible nor perfect when it comes to antivirus apps. You didn't mention when you had your issue with Windows Defender, but if it's been years since the issue occurred, do know that Microsoft has since improved it greatly - so much so it now rivals and beats some third-party antivirus apps in third-party AV testing. It's actually pretty great now and honestly these days I actually don't recommend using third-party antivirus apps anymore, they're not really needed. But don't be complacent regardless what you use, because the best first defense against any sort of malware infection like viruses and ransomware is common sense. Even Bitdefender (and other antivirus apps) can't prevent 100% of these.

Bitdefender in particular is one I've personally had to deal with over the years causing weird issues, like apps crashing because Bitdefender is doing DLL injection and destabilizing those apps.

You should report the false positive to Bitdefender regardless, hopefully they address it in a timely manner.
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2024 Update (24H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2024 Update (24H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/500GB M.2 NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | JBL 306P MkII Studio Monitors | Audio-Technica ATH-M50x Headphones

JimH

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 71663
  • Where did I put my teeth?
Re: Bit Defender Reporting JRiver Is Infected
« Reply #9 on: August 06, 2023, 08:43:00 am »

Logged

kliclick

  • Recent member
  • *
  • Posts: 9
Re: Bit Defender Reporting JRiver Is Infected
« Reply #10 on: August 06, 2023, 09:48:31 am »

Hi, installing the software I get 2 messages from my antivirus software :
- it blocked the access to https://files.jriver-cdn.com/ (I didn't consider it as a real problem)
- but it warned about JRiverASIODriver64.dll being infected by Gen:Variant.Tedy.411941 and put this file in quarantine (image)

Some info about this ? True or not ? And will the software work without this dll ?
Thanks
I read that this can be a "fake" detection, can I safely whitelist this DLL ?
Logged

marko

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 8972
Re: Bit Defender Reporting JRiver Is Infected
« Reply #11 on: August 06, 2023, 10:27:44 am »

False positive. See this thread (also from 6th August): https://yabb.jriver.com/interact/index.php/topic,136712.0.html

In that thread, JimH has posted a link to a tool for reporting the false positive to Bitdefender...
https://yabb.jriver.com/interact/index.php/topic,136712.msg947653.html#msg947653

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7466
  • When Summer comes...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #12 on: August 06, 2023, 11:32:51 am »

False positives with antivirus, regardless of vendor, is actually pretty common. When they do occur, the user of the antivirus (again, regardless of vendor) should report it to the antivirus company as a false positive. Some antivirus apps are worse than others when it comes to false positive rates. Some have better heuristic analysis capabilities, others not so much.

As Jim posted, report all Bitdefender false positives here: https://www.bitdefender.com/consumer/support/answer/29358/
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2024 Update (24H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2024 Update (24H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/500GB M.2 NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | JBL 306P MkII Studio Monitors | Audio-Technica ATH-M50x Headphones

ExiledRoyal

  • Recent member
  • *
  • Posts: 15
Re: Bit Defender Reporting JRiver Is Infected
« Reply #13 on: August 06, 2023, 01:17:52 pm »

My Bit Defender has flagged up the following page saying it's responsible for infections.

https://files.jriver-cdn.com

Anybody else had this?

Thanks, Nick
Logged

BigCat

  • Regular Member
  • World Citizen
  • ***
  • Posts: 212
  • Believe...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #14 on: August 06, 2023, 01:38:51 pm »

OK, now I am getting the malware report in my paid anti-malware program, Emsisoft. It prevents me from downloading the update file itself so that I could upload and scan it with VirusTotal. I have been a paying customer here since Media Jukebox 7 and this has never happened before. I will notify Emsi, but this is... unusual.

Yes, I know Windows Defender has improved functionally, but it is a privacy nightmare.
Logged

BigCat

  • Regular Member
  • World Citizen
  • ***
  • Posts: 212
  • Believe...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #15 on: August 06, 2023, 02:08:12 pm »

OK, I have reported the likely false positive to Emsisoft.

I was unable to DL the JRiver update with one browser, but got it with another. I ran it through VirusTotal and there were only 2 out of 63 positives. One was Bitdefender. You BitDefender users can probably mark it OK. Not sure what changed in JRiver to make heuristics freak out.

I... was able to get it installed.

And hi everyone! I haven't been here for a while!
Logged

Hendrik

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 10786
Re: Bit Defender Reporting JRiver Is Infected
« Reply #16 on: August 06, 2023, 02:12:01 pm »

Emsisoft uses Bitdefender under the hood. It's essentially the same detection.
Logged
~ nevcairiel
~ Author of LAV Filters

Awesome Donkey

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 7466
  • When Summer comes...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #17 on: August 06, 2023, 02:12:08 pm »

Yes, I know Windows Defender has improved functionally, but it is a privacy nightmare.

If you're already using Windows or macOS or even some Linux distros, I fail to see how using Windows Defender is more of a privacy nightmare? If you ask me, if you're using those OSes, your privacy is already long gone.
Logged
I don't work for JRiver... I help keep the forums safe from Viagra and other sources of sketchy pharmaceuticals.

Windows 11 2024 Update (24H2) 64-bit + Ubuntu 24.04 LTS Noble Numbat 64-bit | Windows 11 2024 Update (24H2) 64-bit (Intel N305 Fanless NUC 16GB RAM/500GB M.2 NVMe SSD)
JRiver Media Center 32 (Windows + Linux) | iFi ZEN DAC 3 | JBL 306P MkII Studio Monitors | Audio-Technica ATH-M50x Headphones

BigCat

  • Regular Member
  • World Citizen
  • ***
  • Posts: 212
  • Believe...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #18 on: August 06, 2023, 02:29:39 pm »

Hi Awesome Donkey! Been a long time! I totally get your argument, but I don't see privacy as a yes or no. There are gradients...

And thanks, Hendrick, so that is still true? It explains Emsi agreeing w/BD.
Logged

BigCat

  • Regular Member
  • World Citizen
  • ***
  • Posts: 212
  • Believe...
Re: Bit Defender Reporting JRiver Is Infected
« Reply #19 on: August 07, 2023, 09:07:33 am »

To their credit, the EmsiSoft software notified me a few hours after I had reported the false positives that the files were actually OK, and offered to pull them out of quarantine. And that was on a Sunday.
Logged
Pages: [1]   Go Up