getmusicbee.com
Support => Bug Reports => Topic started by: vpsaxman on May 08, 2016, 06:15:39 PM
-
[MOD: For reports with 3.4 see https://getmusicbee.com/forum/index.php?topic=18398.msg181888#msg181888]
Both Chrome and MS Defender returned a trojan warning when downloading the latest MB zip file (final release candidate). I'm sure it's a false positive, but it wasn't a problem for previous releases.
Here's MS relevant webpage: https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3aWin32%2fFethar.B!cl&threatid=-2147258321&enterprise=0
-
I have the same issue. Windows Defender was very aggressive about it. I assume it's nothing, but I'll hold off on upgrading for now.
-
Assuming you're downloading from the MusicBee website, it's a false positive. You can run it through Virus Total to confirm: https://www.virustotal.com/en/
-
i dont know what to make of this. The last release candidate was also reported by one or two people and then the issue disappeared after that (i assume with a later windows defender definition file). The thing is I use windows defender myself and never had issues (just ran a Scan Now to reconfirm). Also downloaded on another windows 10 machine/ windows defender and no issues reported.
Trying with VirusTotal, there is 1 out of 56 reporting a virus
Rising Malware.Undefined!8.C-zFh4eF8usxI (Cloud) 20160508
but microsoft is not one of them
-
On mine personally, I'm getting a "Trojan:Win32/Fethar.B!cl" notification. Which is very odd indeed. I'll just try updating definitions again later and see if that fixes it.
EDIT: It seems being even one definition update behind seems to cause that false positive, at least on Windows Defender. Doesn't pop up again after it is updated, thankfully.
-
On mine personally, I'm getting a "Trojan:Win32/Fethar.B!cl" notification. Which is very odd indeed. I'll just try updating definitions again later and see if that fixes it.
EDIT: It seems being even one definition update behind seems to cause that false positive, at least on Windows Defender. Doesn't pop up again after it is updated, thankfully.
I just updated definitions before downloading again and I still get the report of "Trojan:Win32/Fethar.B!cl" being found.
-
Just updated to "Definition Update for Windows Defender - KB2267602 (Definition 1.219.1201.0)" and tried again: no virus warning this time although I got the "Windows Smartscreen" warning, but this one's been showing up for a while.
(http://i.imgur.com/WUt2Plo.png)
-
I don't think there's much to be concerned about. Probably this is happening as RC files include a self-extracting zip file. If not Windows Defender then a few other AV programs would always report it as malware. Don't bother with RC files. Only for the official release file, report to AV apps if they throw a false positive.
-
i believe SmartScreen is based on some sort of reputation rating. Because its a new .exe and because its an unknown publisher then it has no reputation.
To become a recognised publisher i would need to purchase a microsoft approved certificate each year.
So when i do the final release that too will be a new .exe and will take a while before a reputation is established.
The strange thing is on my windows 10 machine which is not the machine used for developement, i downloaded and installed the file without this happening (or any of the AV warnings)
-
That's strange as I'm using Win 10. Oh well, no big deal. I'm not concerned about it since it's a beta version and I browse the forum regularly but it might generate some trust issues for new users.
-
It appears Steven updated the link. Not getting a false positive anymore.
-
i just downloaded the latest release and i got the same alert for trojan and my pc removed it now im not even sure if i should use your software anymore.
https://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3aWin32%2fFethar.B!cl&threatid=-2147258321&enterprise=0
-
i just downloaded the latest release and i got the same alert for trojan and my pc removed it now im not even sure if i should use your software anymore.
Did you run the exe through Virus Total? You'll find that at most one or two out of 50+ will come back with a false positive. No one is forcing you to use MB, but trust us - if you downloaded it from the MB website, the problem is with your AV definitions and not with MB.
-
i just downloaded the latest release and i got the same alert for trojan and my pc removed it now im not even sure if i should use your software anymore.
Did you run the exe through Virus Total? You'll find that at most one or two out of 50+ will come back with a false positive. No one is forcing you to use MB, but trust us - if you downloaded it from the MB website, the problem is with your AV definitions and not with MB.
nope, i didn't run it with virus total cause i didn't even run it once it finishs downloading i got a warning from my MS virus scanner and chrome browser for a trojan then it got removed. i have removed your software from my pc after using it for 2 years, sorry i can't trust you anymore bye.
-
nope, i didn't run it with virus total cause i didn't even run it once it finishs downloading i got a warning from my MS virus scanner and chrome browser for a trojan then it got removed. i have removed your software from my pc after using it for 2 years, sorry i can't trust you anymore bye.
Don't you think if there was malware or a virus in the exe that out of the thousands (tens of thousands?) of MB users there would be more than two or three complaints?
Oh yee of little faith.
-
Hi,
I just download musicbee 3.0 from your website installed it and starting scanning some folders and windows defender started giving me alot of warnings this is the message that i got
(http://i.imgur.com/F0VICPK.jpg)
-
Read through the thread and you'll find out it's a false positive
-
Read through the thread and you'll find out it's a false positive
I have read through the thread, i just thought to add a screenshot with the warnings as windows defender is pointing to wavpack.exe
-
its true i updated wavpack.exe to the latest from hydrogenaud.io
if i create a new release package using the old wavpack.exe will you confirm the warning no longer occurs?
-
i just ran wavpack.exe through virustotal and it comes up completely clean.
i would still like for someone to try using a new musicbee release package that uses the old wavpack.exe
i will prepare that tomorrow
-
I'd be happy to try out a new release package. But given the fact that I don't use Defender, which seems to be the biggest offender, my test might not be what you're looking for.
-
its true i updated wavpack.exe to the latest from hydrogenaud.io
if i create a new release package using the old wavpack.exe will you confirm the warning no longer occurs?
I would be happy to assist too
-
here you go - it also includes the latest musicbee.exe patch and bass.dll:
http://www.mediafire.com/download/9zkq8x87cys4a4n/MusicBeeSetup_3_0.zip
-
I don't get anymore warnings with windows defender, although i do get a windows smartscreen warning which i didn't before but at least windows defender doesn't flag wavpack as a virus anymore.
-
thanks for checking it.
smartscreen is a reputation filter and will stop once a number of people have downloaded and run it.
I will update the main download page tomorrow with this new release package
edit:
just to be clear, my view is that wavpack.exe is fine, and and its still a false positive
-
I faced the same issue (Trojan) and can confirm that repacked installation file is fine. Tested right now.
-
i have updated the main downloads page and also the Latest Version topic with updated links to the new release package
-
I just want to let you know Avast is recognizing MusicBee beta as a virus. I downloaded the beta version from a link Steven himself sent me in my last thread. Upon extraction to program files, Avast automatically scanned for suspicious files but found nothing. Now today, I click my MusicBee shortcut and Avast "Cybercapture" opens and puts MusicBee.exe in quarantine even though I said trust this file. Avast has always been my go to anti-virus because it's been pretty good at detecting real viruses, so this is strange...
-
I just want to let you know Avast is recognizing MusicBee beta as a virus.
Thanks for reporting this, but...
This has been a known Avast issue for many years now.
It is related to some 'deepscan' or 'deepscreen' feature it has.
You should disable that for MusicBee.
But more importantly, this is not a MusicBee issue.
It is an annoying Avast issue.
Any user experiencing this, please report/complain about this at Avast. Not here.
Avast should have addressed this a long time ago already.
-
I stickied this topic, since it has come up so often. Should I move it to bugs? Sometimes it's reported there.
-
I just want to clarify... I know MusicBee is not a virus and never thought that. Avast has always been rock solid and has never done this before with any file, so I figured it was some change they did to the program.
-
I stickied this topic, since it has come up so often. Should I move it to bugs? Sometimes it's reported there.
Sticky is good.
Let's leave it here, since it was indeed an honest question raised by BRAINS.
Hopefully this posting will function as some honey pot for bees unaware of this (mal)function of Avast.
Avast says musicbee virus no avast wrong alert musicbee not a virus bass not a virus no malware in musicbee good avast bad disable deepscan disable deepscreen for musicbee problem solved please report to Avast do not report at musicbee forum
Never download MusicBee from other websites!
-
Here is the virustotal result of the latest MusicBee patch (MusicBee_Setup_3_1_6266.exe):
https://www.virustotal.com/en/file/a944aee2c36b26217ff4ec14b223b20e9510fd7be263ef82a516f3679ecb41bd/analysis/1488213898/ (https://www.virustotal.com/en/file/a944aee2c36b26217ff4ec14b223b20e9510fd7be263ef82a516f3679ecb41bd/analysis/1488213898/)
I think it is pretty clear only 4 vendors detected it. I have also used bitdefender(the free edition, which shares the same engine as the paid one), here is the result:
(https://i.imgur.com/fc7Lwge.png)
-
The same now started with Kaspersky since November, 19. Instantly delete MusicBee.exe (3.1.6529) - shows that exe include Trojan.MSIL.Miner.vuh and Trojan.MSIL.Miner.sb.
https://www.virustotal.com/en/file/57e68000ebfc071b06ff2101189e9cdb0ab22f315d50b2322366ba9ff7d148c0/analysis/1511084542/ (https://www.virustotal.com/en/file/57e68000ebfc071b06ff2101189e9cdb0ab22f315d50b2322366ba9ff7d148c0/analysis/1511084542/)
Including program folder and exe to excluding list didn't help at all.
Sent a request to support :(
-
The strange thing is, you extract the .exe from the zip, and upload that separately to virustotal and there is no problem with it.
@ Steven
I also ran the latest patch zip (containing MusicBee.exe 3.1.6529.34678) through virustotal and got the same results as ost.
For comparison, I also ran the last MusicBeeTestCustomImage.zip as well. It isn't flagged with any problems at all.
Could the original zip container have been made by older software and that's what giving the false positive?
-
Got an answer from Kaspersky Support:
"Dear user, I apologize for the long processing time of your request.
It was an erroneous operation. It will be fixed. Thank you for your help."
-
if only Avast was as helpful and responsive
-
I noticed that the new basswasapi.dll also got flagged at VirusTotal.
So it's not just musicbee.exe
-
Another good reason to avoid Avast like the plague:
https://www.vice.com/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation
-
I just want to point out that this issue is not exclusive to Avast. AVG is known to go after media players from time to time as well. Go figure. Never wrote any AV code myself, so I can't address it.
-
Never wrote any AV code myself, so I can't address it.
You don't need to know any code in order to white-list the entire directory in which MB lives. Problem solved.
-
I just want to let you know Avast is recognizing MusicBee beta as a virus. I downloaded the beta version from a link Steven himself sent me in my last thread. Upon extraction to program files, Avast automatically scanned for suspicious files but found nothing. Now today, I click my MusicBee shortcut and Avast "Cybercapture" opens and puts MusicBee.exe in quarantine even though I said trust this file. Avast has always been my go to anti-virus because it's been pretty good at detecting real viruses, so this is strange...
You can directly report the problem to avast for evaluation and you can uninstall avast first and reinstall if there is already feedback from them. Stay safe...
-
Delete Avast. It is not even rating good among other compatitors. 😂
-
Why anyone would be still using Avast/AVG products after the Jumpshot scandal is really beyond belief :o
-
Not only Avast, while I was able to install MusicBee 3.3.7491 without any problems, Norton 360 reports all beta versions to be infected with Heur.ADVMLB.
-
Not only Avast, while I was able to install MusicBee 3.3.7491 without any problems, Norton 360 reports all beta versions to be infected with Heur.ADVMLB.
Can you share a screenshot to prove that that is actually happening?
-
(https://i.imgur.com/RlyVUln.jpg)
-
...
Strange. I personally can't recall anybody reporting Norton to raise false flags on any MB 3.4 version before.
It would probably be good to report this to Symantec/Norton. It's obviously a problem on their side.
Anyway, I just ran the latest MusicBee 3.4 beta .exe through VirusTotal.
Hopefully that proves to anyone stumbling upon threads like this one that MusicBee's trackrecord is still perfect after all these years.
(as long as you download it from MusicBee's website of course)
(https://i.imgur.com/kTXV2MO.png)
-
It usually the bass*.dll files, not musicbee itself, that cause these alerts due to the way the bass developer compresses the files. Its up to the security software vendors to scan his site to whitelist the official dll files. I included a bunch of updated bass plugins in the last 3.4 beta update so it will probably take a bit of time for the alerts to stop
-
Thanks Steven. For now, I am happy with 3.3.7491.
And btw, Congratulations on this great piece of work!
-
I'm getting a report of a trojan in 3.4.7586 on both the dropbox link and the backup. As I've had this installed for quite some time so I suspect a windows defender definition update is to blame.
-
You would be correct about that: https://getmusicbee.com/forum/index.php?topic=18398.msg181888#msg181888
-
Windows Defender updated 10 minutes ago. Windows updated 5 minutes ago. Downloaded the latest update about a minute ago. Result from Windows Defender history log Trojan:Win32/Wacatac.D4!ml
-
<sigh> Did you read this thread? Did you search the forum?
There is no virus. There is no trojan.
-
Fake news~ "beware of false knowledge, it is more dangerous than ignorance"
-
I have locked this topic