Microsoft diagnostic tool triggers Bitdefender, is this a false positive?

Petersl

Hi devs,

My bitdefender total security blocked a threat from an official microsoft diagnostic tool that I downloaded from here: https://support.microsoft.com/en-us/topic/fix-problems-that-block-programs-from-being-installed-or-removed-cca7d1b6-65a9-3d98-426b-e9f927e1eb4d

The threat it blocked is called Gen:Variant.MSILHeracles.260801

Bitdefender only triggered when running the file, when I scanned the file with bitdefender it showed as no threats found.

I've uploaded the file to virustotal and no threats where found by virustotal. I also uploaded to bitdefender for analysis but they have responded to me saying that "There was a problem while fetching samples from this ticket.".

I've sent them the link to the file as I have already deleted it.

I assume this is a false positive?

Petersl

Hi devs,

Bitdefender support has sent me a reply saying it is indeed a false positive:

"Hello Peter,

Thank you for providing these additional details regarding the file and for keeping us updated on your findings.

We appreciate your efforts of proactively scanning the file with both Bitdefender and VirusTotal. Since the manual inspection performed by Bitdefender did not find anything malicious, and the file returned clean results on VirusTotal, you can safely consider that the file is completely safe. The initial alert you experienced when running it was indeed what we call a false positive, which can sometimes occur when a secure file exhibits behaviors that resemble a generic threat signature.

Since you have already deleted the file yourself, there is no further action required, and your system remains fully protected.

We remain at your disposal should you encounter any other unusual alerts or if you need any further assistance with your security solution.

Kind regards"