Bitdefender: Infected file deleted

takisk · 2024-10-17T19:18:35.947Z

Operating system

Windows

Joplin version

3.0.15

What issue do you have?

I have bitdefender antivirus plus installed on windows 11 machine. I get the following message every time I open joplin:

"The file C:\Users\XXX.config\joplin-desktop\tmp\b21728f37a335a8fba3aa5586f8f132e\08a669877a8345e9858aa91a5c26d8d3.md is infected with Heur.BZC.PZQ.Boxter.81.378A8EE6 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean."

Is this a false alarm?

dpoulton · 2024-10-17T19:29:07.467Z

@takisk welcome to the forum.

takisk:

Heur.BZC.PZQ.Boxter.81.378A8EE6

takisk:

Is this a false alarm?

Likely but it may depend on what you had put in your note stored as 08a669877a8345e9858aa91a5c26d8d3.md. Did your note contain script / code?

https://support.avira.com/hc/en-us/articles/360000819265-What-is-a-HEUR-virus-warning

What is a HEUR virus warning?

Heuristic refers to a "preliminary detection" feature that can also detect unknown viruses. It involves a complex analysis of the affected code and scanning for virus-specific functions. If the analyzed code does meet such characteristics, it is reported as suspect.

This does not mean, however, that the code is a virus for sure; false positives may occur.

takisk · 2024-10-17T19:57:52.726Z

Thanks for the reply. How do I find specific note?

dpoulton · 2024-10-17T23:32:35.118Z

takisk:

... and was moved to quarantine.

I am not familiar with BitDefender, but look in its quarantine store?

_vg · 2024-10-18T18:15:33.938Z

takisk:

C:\Users\XXX.config\joplin-desktop\tmp\b21728f37a335a8fba3aa5586f8f132e\08a669877a8345e9858aa91a5c26d8d3.md

Locate and open the file above in file explorer, or another solution:

in any note, add [click me](:/08a669877a8345e9858aa91a5c26d8d3) and follow the link

takisk · 2024-10-19T05:18:57.785Z

The [click me] worked. Found a pentest note referring to bloodhound that apparently the AV did not like.

Thanks for the help!

system · 2024-11-18T05:19:31.944Z

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.