JK11 Posted September 19, 2023 ID:1590039 Share Posted September 19, 2023 A year ago I downloaded some retro screensavers from Windows 95, including one called "ssstars.scr". It's been on my computer for about a year and hasn't caused any problems for me at all. Yesterday, I did a Bitdefender scan and got the following message: "The file C:\Windows\System32\ssstars.scr is infected with Gen:Heur.Jatommy.02117.am0@bqkaRbh and was moved to quarantine." Strangely, Bitdefender has never recognized any malware on this file before. I did a Malwarebytes scan and it didn't detect any malware on my computer at all. I restored the file and uploaded on VirusTotal and it wasn't flagged by any vendors. I did another Bitdefender scan and not it's not being recognized as malware and it's still on my computer. Is this a sign it was a false positive? I don't know why it was recognized as malware, and after restoring the file to my computer it's not longer being recognized as one. Would appreciate any insight. Link to post Share on other sites More sharing options...
David H. Lipman Posted September 19, 2023 ID:1590045 Share Posted September 19, 2023 The detection is not for a virus. The name starts: Gen:Heur which is shorthand for Generic Heuristic and If there are zero hits on Virus Total then that Heuristic detection is most likely a False Positive. The can be easily determined by the Virus Total Report which was not posted. Look at the Details tab and find "First Submission". If the file is old, it is definitely a False Positive Heuristic detection. Link to post Share on other sites More sharing options...
Porthos Posted September 19, 2023 ID:1590046 Share Posted September 19, 2023 26 minutes ago, JK11 said: I restored the file and uploaded on VirusTotal and it wasn't flagged by any vendors. I did another Bitdefender scan and not it's not being recognized as malware and it's still on my computer. Is this a sign it was a false positive? Yes, it is a sign. Do you have the Virus total link? Link to post Share on other sites More sharing options...
JK11 Posted September 19, 2023 Author ID:1590085 Share Posted September 19, 2023 4 hours ago, David H. Lipman said: The detection is not for a virus. The name starts: Gen:Heur which is shorthand for Generic Heuristic and If there are zero hits on Virus Total then that Heuristic detection is most likely a False Positive. The can be easily determined by the Virus Total Report which was not posted. Look at the Details tab and find "First Submission". If the file is old, it is definitely a False Positive Heuristic detection. I see. It looks like it was first submitted in 2009, so I guess it's likely a false positive. 4 hours ago, Porthos said: Yes, it is a sign. Do you have the Virus total link? Yes the link is below: https://www.virustotal.com/gui/file/91d71b625513d1fc3fc83034432de692ab8a83bda0cdc02fe1ab740bc753b428 Link to post Share on other sites More sharing options...
David H. Lipman Posted September 19, 2023 ID:1590087 Share Posted September 19, 2023 It is definitely a False Positive Heuristic detection. Link to post Share on other sites More sharing options...
David H. Lipman Posted September 19, 2023 ID:1590088 Share Posted September 19, 2023 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts