Strange unknown viruses in Internet but detected By BitDefender

BitDefender block one of my Simulator Cockpit software (spad.next.exe) with a virus called "Generic.Dacic.6232.501FC622"

searching in the web with this viruses or its root name "generic.dacic" , the search return none informations about it.

did somebody have this type of alert or error ? is it a false alert ?

Thierry

Find more posts tagged with

Comments

Flexx

https://community.bitdefender.com/en/discussion/104780/strange-unknown-viruses-in-internet-but-detected-by-bitdefender

Bitdefender uses its own unique way of naming malware, which might not match the more commonly used names you’ll find on internet. Because of this, it can be a bit tricky to find information about specific Bitdefender detection names on the internet. This is completely normal and part of how Bitdefender keeps its threat detection consistent and effective.

Also, since Bitdefender has already detected and removed the malware, your system is currently safe. There is no need to worry unless you notice anything unusual again.

Additionally, you can take a look at the PDF attached below, provided by Bitdefender Support. While it may appear slightly outdated due to the older Bitdefender logo, the information it contains is still accurate and relevant.

Virus Naming. The “Who’s who” Dilemma. .pdf

Regards

Sikorsky77

Hi Flexx

thanks for this cleared informations about viruses naming, but the problem isn't at all resolved because the program is always infected after the detection and remove action and i can't launch it at all

Regards

Thierry

jhutch123

I am having the same problem - unable to run spad.next or create an exception in Bitdefender. Access was fine this morning.

Regards

Jeremy

Sikorsky77

very strange , i ran an analysis of disk C: where is installed Spad.next and bit defender return no error

Sikorsky77

when you look at event detection , do you have also the Wmiapsrv.exe corrupted ?

Sikorsky77

when i make an analysis on the folder c:\programm\spadnext , bitdefender has not detected an infection on the 142 files of the folder , that make strange is the fact that there is no virus detection and the fact that when we launch Spadnext.exe, the file is considered as infected

i try to add an exception like you

Flexx

I downloaded all the files available on the website https://www.spadnext.com/ and scanned each file using VirusTotal. All the files are clean. Below are the VirusTotal links for each file:

https://www.virustotal.com/gui/file/381fcf091dda7dcf2a990b874fb72082e8972ebfc57530fd7ce8037daa81fd17

https://www.virustotal.com/gui/file/ef4ab05067b172e5189227b0589c7469c71e12ffb60937fccc50b42aff1250bd

https://www.virustotal.com/gui/file/1771727af48270bf731d097272cfaa680c835bbfaca1e015b580b60e531ec26f

https://www.virustotal.com/gui/file/e19c13e243d4c17b2e5fb8900e0d3130e5600562ef3a7790bb7208170a989a5d

https://www.virustotal.com/gui/file/24b2386362260afc8c664290a3e95a3cf58be4774b26eae032abbde226e89aac

If you believe a website or file has been incorrectly blocked by Bitdefender, you can submit the details to Bitdefender malware researchers by filling out the form at the link below:

https://www.bitdefender.com/consumer/support/answer/29358/

If the website or file is found to be incorrectly blocked, the detection will be removed within a maximum of 72 hours. However, if the detection persists after 72 hours, the website or file will be considered malicious, as determined by Bitdefender malware research team, and the detection will remain.

Until the file is reanalyzed by the Bitdefender Malware Research Team, you can create an exception for both the executable file and the folder of the respective simulator software after submitting it to them. Kindly note that Bitdefender products offer two types of exceptions: one for folders (Bitdefender Antivirus) and one for executable files (Bitdefender Advanced Threat Defense). You can follow the steps provided below to create the appropriate exception in your Bitdefender product.

1) Temporarily disable Bitdefender Protection: https://www.bitdefender.com/consumer/support/answer/28557/

2) Set exclusions in Bitdefender Antivirus: https://www.bitdefender.com/consumer/support/answer/13427/

3) Set exclusions in Bitdefender Advanced Threat Defense: https://www.bitdefender.com/consumer/support/answer/2393/

4) Re-enable real-time protection in Bitdefender.

For more information, kindly contact Bitdefender support by visiting https://www.bitdefender.com/consumer/support/help/

Select, How to's & Troubleshooting Bitdefender products→Troubleshooting→I don't know→Contact Support→ You will get the option of chat, call or email.

To get an immediate update, kindly use the chat option. Also, ensure that no ad blockers or privacy extensions are enabled in your web browser, as they may prevent the chat window from appearing.

Bitdefender support may request diagnostic logs and will guide you through the process of generating them.

Regards

Sikorsky77

many thanks Flexx , i will have a look in

Regards

Thierry

Smartflyer

Same problem here. Even after excluding c:\program files\spad.next\spad.next.exe in the Advanced Threat Defense tab, Spad.next.exe is still blocked : Detectie-ID: Generic.Dacic.6232.501FC622.

jhutch123

The problem continues. Have firewall and virus exceptions in place, reinstalled an earlier version of Spad.Next and the result is still the same - complete block.

Jeremy

Marius G.

Hello,
Please submit the detected files via our webform here:
https://www.bitdefender.com/consumer/support/answer/29358/
Thank you.

jhutch123

Hi I have already done this and also downloaded the log files to you.

Thanks

Jeremy

Alexandru_BD

Hello,

We are actively looking into this.

Thank you all for your feedback here.

Sikorsky77

i created this morning all the eceptions aloso on Website www.spadnext.com and SpadNext started until it encountered a Dotnet.exe alert with same virus

cgts

Just to add to the list of users having the exact same problem with Spad.next. Also, yesterday, Bitdefender quarantined a hole bunch of other Flight simulator utilities such as MSFS_AddOnLinker and a raft of registry entries associated with those apps. I managed to recover those from Quarantine.

simonLee92

Hello I solved managed exceptions like screenshoots attached.

Marius G.

Hello,
New signature updates are available, that should fix the detection. Can you please update Bitdefender (right click on the system tray icon → Update now) and let us know if the detection still occurs?
Thank you.

Alexandru_BD

Thank you Marius for the heads-up!

jhutch123

Great now working fine - many thanks.

Remaining question is why the exclusion process appeared to fail.

Jeremy

Alexandru_BD

I think there can be a few possible reasons behind this. Just a thought. The real-time protection or behavior-based detection, namely Advanced Threat Defense might override the exception if the file exhibits malicious behavior at runtime, or if the file is in a location monitored more strictly, like startup folders or temp directories. Or if the exception was set only for the antivirus and not for other modules as well, OTP, ATD.. I think heuristic rules may sometimes override manual input. The first thing to check in my opinion in such cases would be if the exception is added for all relevant modules. There can be other scenarios, if the quarantined file is modified or re-downloaded after restoration (e.g., from a game patcher or updater), the antivirus may see it as a new file, not covered by the previous exception.

In this case I think you should confirm the exact file path and checksum haven't changed, adding the new version to the exception list, if this applies. Also, exceptions may not be saved properly due to lack of admin rights when creating them, or group policy restrictions (common in enterprise environments), or even conflicts with other security software. Another thing to keep in mind is that security solutions rely on cloud intelligence these days, thus a file marked as a known threat on a larger scale may still be quarantined..

Regards

SPADneXt

Hi Marius,
Is there any way to get in touch with you?
I'm the Author of SPAD.neXt and would like to negotiate what the issue was, and how to prevent it in future, since it happened previously already.
All executables of SPAD.neXt are digitally signed with an extended code signature certificate, what else needs to be done?
Thanks in advance,
Ulrich

Marius G.

Hi Ulrich,
The files were automatically flagged by our systems due to unusual activity.
If there will be any major changes in the future (including but not limited to digital certificate, installer, packing), please submit the files beforehand, on our portal here:
https://www.bitdefender.com/consumer/support/answer/29358/
Thank you, and sorry for the inconvenience caused by this matter.