foo_pd_aac: Flagged as trojan by Microsoft Defender

Topic: foo_pd_aac: Flagged as trojan by Microsoft Defender (Read 915 times) previous topic - next topic

0 Members and 1 Guest are viewing this topic.

foo_pd_aac: Flagged as trojan by Microsoft Defender

2020-12-23 18:20:27

Since this morning (CET) foo_pd_aac has been flagged as a trojan by Microsoft Defender. I guess, and hope, it is a false positive, but I thought I'd let you all know.

Re: foo_pd_aac: Flagged as trojan by Microsoft Defender

Reply #1 – 2020-12-23 19:01:37

It is a Russian Hackers. Do not worry.
Or
It is a grate time to normal-antivirus-installing.

Re: foo_pd_aac: Flagged as trojan by Microsoft Defender

Reply #2 – 2020-12-24 07:17:33

Looks like another lovely case of false positive. VirusTotal mainly shows the typical nonsense detections, same engines that "detect" absolutely everything as malicious. Quick check at API calls it makes shows suggests that it does nothing malicious and is just a typical helpful component. I submitted the file to Microsoft for re-evaluation.

Re: foo_pd_aac: Flagged as trojan by Microsoft Defender

Reply #3 – 2020-12-24 08:15:49

Update. Microsoft was quick and the false detection has been removed.

Quote

Analyst comments:

We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

   1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
   2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
   3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions

Re: foo_pd_aac: Flagged as trojan by Microsoft Defender

Reply #4 – 2020-12-24 11:13:16

Thanks a lot, works again now.

Re: foo_pd_aac: Flagged as trojan by Microsoft Defender

Reply #5 – 2020-12-25 00:26:10

Thanks, Case, for filing that false positive report before I even had a chance to notice this.

Notice