I found a reply elsewhere on this forum stating that the
/private/tmp/com.bitdefender.dmg exception that appears in the UI sometimes is legitimate and is added automatically by the app itself.
I just wanted to say that this is really bad UI! If the app has exceptions of its own, they should not show up here.
If some malware wanted to avoid being scanned, one way to do it would be to somehow arrange to add an exception at a known path - and it would make it something innocent looking... just like this one!
Even if in this case it's nothing to worry about, the current UI design is bound to cause some concern to users.