JDownloader Community - Appwork GmbH
 

Reply
 
Thread Tools Display Modes
  #1  
Old 12.03.2022, 13:05
lothi lothi is offline
Baby Loader
 
Join Date: Sep 2019
Posts: 7
Default False Positive Windows Defender: Misleading:Win32/Lodi

Hello,

since 2020-03-10, after an automatic update of jdownloader2.exe (to version #45604) with windows defender, a virus warning Misleading:Win32/Lodi (see attachment) appeared on 2 windows 11 computers.

I have searched for it, but I can't find anything on the web or in this forum. I have never had such messages with jdownloader and have ignored the message in confidence, but am now unsure.

What is going on? Any reason to worry? Have other users received the same message? Developers, should I be worried or can I ignore this message?

Thanks and greetings
lothi
Attached Thumbnails
Screenshot 2022-03-12 115605.jpg  
Reply With Quote
  #2  
Old 12.03.2022, 15:28
zdzichu476 zdzichu476 is offline
DSL User
 
Join Date: Mar 2019
Posts: 38
Default

Same here, Defender blocks it running, but doesn't delete file. I can just allow it, but I don't really want to in case it's real threat

EDIT
Using JDownloader2Update.exe I can start JDownloader without Defender detecting anything. I also noticed JDownloader2.exe is old, from 2018-05-09, and has Appwork GmbH digital certificate, so it's probably false positive

Last edited by zdzichu476; 12.03.2022 at 15:37.
Reply With Quote
  #3  
Old 13.03.2022, 16:20
lothi lothi is offline
Baby Loader
 
Join Date: Sep 2019
Posts: 7
Default 45604 virus included?

Hi,
I had already described my problems when updating: https://board.jdownloader.org/showthread.php?t=90026

When I download the jdownloader2 in the latest version here https://jdownloader.org/jdownloader2

come from windows defender

PUA:Win32/PcMechanic

Containerfile ...JDownloaderSetup.exe

7z(Sfx)->en/GenericSetup.resources.dll
7z(Sfx)->en/DynActsBLL.dll
7z(Sfx)->en/es/GenericSetup.resources.dll
7z(Sfx)->en/fr/GenericSetup.resources.dll

So I have virus warnings when updating in Jdownloader2 to version 45604 and also when trying to reinstall.

What is going on? Is it only me that has these problems?

Greetings lothi
Reply With Quote
  #4  
Old 13.03.2022, 16:24
lothi lothi is offline
Baby Loader
 
Join Date: Sep 2019
Posts: 7
Default

Next day defender (Windows Defender) warning

PUA:Win32/Vigua.A

in

...AppData\Local\JDownloader 2.0\Jdownloader2.exe

an other locations belonging to jdownloader.

What is going on? Is it only me that has these problems?

Greetings lothi
Reply With Quote
  #5  
Old 14.03.2022, 17:08
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@lothi: It's a false positive detection. "PUA is not considered a virus, malware, or other type of threat" it's heuristic that *thinks* that the application does unwanted stuff. In JDownloader it downloads files, extracts them and visits websites for downloads....and of course those actions can easily trigger such heuristic
__________________
JD-Dev & Server-Admin
Reply With Quote
  #6  
Old 14.03.2022, 17:09
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

You can report files for further investigation, it would help a lot and maybe increase speed of review for this issue:
microsoft.com/wdsi/filesubmission
__________________
JD-Dev & Server-Admin

Last edited by Jiaz; 16.03.2022 at 19:42.
Reply With Quote
  #7  
Old 16.03.2022, 17:13
themancha themancha is offline
Modem User
 
Join Date: Jun 2020
Posts: 4
Thumbs down [False positive] Trojan win32/detplock detected by Windows Defender - Windows 10

Hi, today I executed my JD and Windows Defender blocked it showing a win32/detplock trojan alert.

Looking for it, it's a trojan used to generate revenue. Are you using trojans for this purpuose? If so, it would be better to offer an ads-based option and a paid option.

Thank you!
Reply With Quote
  #8  
Old 16.03.2022, 17:18
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@themancha :

We've already reported it as false positive,see https://board.jdownloader.org/showthread.php?t=90026
It's a wrong detection/classification and neither does JDownloader.exe (a simple exe4j launcher for JDownloader, unchanged since several years) nor does JDownloader itself contain any malware.

please report it by yourself as well https://board.jdownloader.org/showpo...52&postcount=6
__________________
JD-Dev & Server-Admin
Reply With Quote
  #9  
Old 16.03.2022, 21:46
themancha themancha is offline
Modem User
 
Join Date: Jun 2020
Posts: 4
Default

Understood Jiaz. I sumitted the file to Windows so they can clear this false positive. Thank you!
Reply With Quote
  #10  
Old 17.03.2022, 10:49
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@themancha: Thanks for your support!
__________________
JD-Dev & Server-Admin
Reply With Quote
  #11  
Old 27.03.2022, 19:53
Stevinho Stevinho is offline
Modem User
 
Join Date: Oct 2021
Posts: 4
Default

Hello, today I have also received the problem with false positive warning from Windows Defender. Unfortunately Defender has deleted the jdownloader2.exe directly, it is not even in quarantine anymore, so it cannot be restored.
How can I get Jdownloader 2 to work again and keep the previous settings ? Is it enough to install the program again over the old installation ?

Edit: Thank you, Jdownloader 2 is working now again. Hopefully Microsoft is taking a look at your submission soon.

Last edited by Stevinho; 28.03.2022 at 18:52.
Reply With Quote
  #12  
Old 28.03.2022, 12:56
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@Stevinho:
We're still waiting for our review of our submissions. Still shown "in progress" :(
You can also do a fresh installation, see https://jdownloader.org/jdownloader2
and copy over your existing settings/links..see
https://support.jdownloader.org/Know...-configuration

copy/backup the complete cfg folder
__________________
JD-Dev & Server-Admin
Reply With Quote
  #13  
Old 01.04.2022, 21:09
sgtdeathadder sgtdeathadder is offline
Baby Loader
 
Join Date: Feb 2022
Posts: 8
Exclamation Virus alerts related to Jdownloader

I had some virus alerts related to Jdownloader so I decided to uninstall and make a fresh install but I'm getting this alert when trying to open the installer:

**External links are only visible to Support Staff****External links are only visible to Support Staff**

PUADIManager:Win32/OfferCore
Reply With Quote
  #14  
Old 01.04.2022, 21:19
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 71,044
Default

Merged similar threads.

@sgtdeathadder
Next time please use the boardsearch to look for similar threads before posting.
Also please read the previous replies in this thread and report this false positive to Microsoft.

-psp-
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #15  
Old 02.04.2022, 10:05
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@sgtdeathadder: you can also use the installer from here
https://jdownloader.org/jdownloader2
__________________
JD-Dev & Server-Admin
Reply With Quote
  #16  
Old 03.04.2022, 16:06
Jigsaw5386 Jigsaw5386 is offline
Modem User
 
Join Date: Apr 2022
Posts: 1
Default Jdownloader uninstalls itself

Hi Jdownloader Team, hi Community! This is my first post since I can’t fix this problem by myself. 4 Weeks ago I noticed that jdownloader has closed automatically after half an hour. When I clicked the icon to restart jdwnloader it says program not found… it uninstalled itself!!!

Does someone have the same problem and solved it already?

Thanks for your support!
Reply With Quote
  #17  
Old 04.04.2022, 09:47
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@Jigsaw5386: most likely your defender removes the JDownloader2.exe due to false positive, see this thread. You can either try to restore the file manually or add JDownloader folder to whitelist or try out installer from here
https://board.jdownloader.org/showpo...8&postcount=15
__________________
JD-Dev & Server-Admin
Reply With Quote
  #18  
Old 07.04.2022, 00:25
zonetrooperex's Avatar
zonetrooperex zonetrooperex is offline
JD Beta
 
Join Date: Nov 2013
Posts: 52
Question Windows Defender Detected JD2?

Click image for larger version

Name:	Screenshot 2022-04-07 071945.jpg
Views:	5
Size:	63.9 KB
ID:	9927

While I suspect that it's just a false positive, could you please clarify the above Windows Defender detection?
Reply With Quote
  #19  
Old 07.04.2022, 11:19
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,232
Default

@zonetrooperex: yes, it's one of the false positives this thread is all about.
We're still waiting for some sort of feedback from our submissions about this...
You should be able to choose Action->Restore/Keep
__________________
JD-Dev & Server-Admin
Reply With Quote
  #20  
Old 08.04.2022, 00:20
HYauser HYauser is offline
Modem User
 
Join Date: Nov 2014
Posts: 2
Default Windows 11 deinstalliert JD2

Grad mein Lap gestartet und JD vermisst. Versucht, die Installation zu finden. Versucht, den JD neu zu installieren und dann:
Gesperrt durch Windows-Sicherheit!
Dort entdeckt, dass "eine potentiell unerwünschte App gefunden" wurde und gleich ungefragt deinstalliert wurde.

Meine Frage: wem darf ich verbal die Faust auf die Nase halten?

Unabhängig davon, dass ich dies für eine unglaubliche Frechheit halte, wo gibt's denn sowas, dass ein akut genutztes Programm - gewollt installiert - fremdbestimmt entfernt wird?

(Windows 11, 22000.556)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 04:14.
Provided By AppWork GmbH | Privacy | Imprint
Parts of the Design are used from Kirsch designed by Andrew & Austin
Powered by vBulletin® Version 3.8.10 Beta 1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.