Mb reported by Windows as having a Trojan

[Barlet]

The following notice have come on screen today after updating MusicBee
Threat found - action needed .. virus marked as severe

Detected: Trojan:Win32/Bearfoos.A!ml
Status: Active
Active threats have been remediated and are running on your device

Date: 25/08/2023 11.49
Details: This program is dangerous and executes commands from an attacker
Affected items:

file D:\MusicBee\MusicBee.exe

Please help!!!

[hiccup]

One of the following is probably the case:

a.  your security software pulls a false alarm
b.  you have downloaded MusicBee from some malicious website
c.  you have some serious malware on your computer that has infected MusicBee.exe

b.t.w.
What av software are you using? I hope it's better then their use of the English language suggests:

"Active threats have been remediated and are running on your device"

[MotleyG]

I've had the same report twice this week on Win11, using Windows Defender. I had no issues, and had no other protection notices prior to this.



Thought it might be a false positive the first time on Aug-18, but came up again first thing this morning after reinstalling.

I use a portable install downloaded direct from the site, and have update using a recent build at 3.5.8631P

[hiccup]

I've had the same report twice this week on Win11, using Windows Defender. I had no issues, and had no other protection notices prior to this.

That's odd. I'm on W10, also using Windows Defender (up to date) and I never had a warning.
Maybe W11 is doing something differently from W10 regarding virus detection?

[Steven]

please report the issue to the security software vendor - there should be a way to do that

[MotleyG]

please report the issue to the security software vendor - there should be a way to do that

I have submitted my findings to Microsoft for both threat reports. I'll let you know what they respond with. This was through an Enterprise version of Windows Defender on Win11. Apparently this Trojan:Win32/Bearfoos.A!ml dates back to 2018. Hopefully a false report. My IT admin team has removed my access to MusicBee pending the outcome and it is awfully quiet here now.

[Barlet]

The Trojan notice had been generated by Windows Defender. The funny thing is that I have two versions of MB running, one on a Desktop and the other as Portable. Only the Portable version has generated that virus report.
I have been using MB for quite a long time now to know that there are no virii in it and trust it completely., I only reported it so that if anything can be done about it, it will be done!

[MotleyG]

The Trojan notice had been generated by Windows Defender. The funny thing is that I have two versions of MB running, one on a Desktop and the other as Portable. Only the Portable version has generated that virus report.
I have been using MB for quite a long time now to know that there are no virii in it and trust it completely., I only reported it so that if anything can be done about it, it will be done!

Interestingly, I was also using the Portable install of MB on Win11 when the Trojan notice came up. When I was on Win10, I used a standard installation and didn't have any issues.

[alec.tron]

Hai.
I now got one on Win10 for the first time as well.
Windows Defender claims it found
"Trojan:Script/Wacatac.B!ml"

on the install as well as the portable from today here:
https://getmusicbee.com/forum/index.php?topic=36464.msg217145#msg217145

Churs.
c.