Trojan.MSIL.Basic.8.Gen

The_Rootbeer

Hello everyone,

Yesterday, I was writing a REST API in Java and was attempting to connect to a database I had in MySQL. I decided to take a break and run a quick scan. In the middle of the scan, Trojan.MSIL.Basic.8.Gen was detected. Now, I would like to say that I have had a false positives in the past when writing Rust programs. Though, this is strange. I was using VS code, Spring boot for the framework, and MySQL workbench (all on windows 10). Maybe it was a byte sequence in my code? At this point, I have cleared all data in temp and %temp%, and all prefetch data. I have cleared all of my cache, ran a sys scan, and have submitted a bdsyslog. I am not sure where else to look, though my computer is still acting strange and I need to work on some of my programs. I am wondering it is polymorphic in nature?

I would greatly appreciate any feedback

Thank you!

Flexx

https://community.bitdefender.com/en/discussion/96672/trojan-msil-basic-8-gen

Can you upload the sample to virustotal and share the link here.

Regards

The_Rootbeer

@Flexx

I already deleted the files containing the code, though I could rewrite it and upload it.

Flexx

https://community.bitdefender.com/en/discussion/comment/326947#Comment_326947

If you can then, we can get in touch with malware research team to recheck on it and possibly remove the detection.

Regards

The_Rootbeer

@Flexx

Okay, I am rewriting the code and will submit it.

The_Rootbeer

@Flexx

It will not le me post the link due to total account time?

The_Rootbeer

@Flexx

I tried to send it in a message, but I am still receiving the same error.

The_Rootbeer

@Flexx

That has to be a false positive

Backend folder

Gjoksi

Here's a screenshot of the detected threat:

Flexx

https://community.bitdefender.com/en/discussion/comment/326956#Comment_326956

If you think the website/ file is incorrectly blocked by bitdefender you can share the same with malware researchers by filling up the forum in below stated link

https://www.bitdefender.com/consumer/support/answer/29358/

If website/ file is indeed incorrectly blocked, detection will be removed in maximum of 72 hours and if the detection still remains after 72 hours, consider the website/ file as malicious by malware researchers and the detection will stay.

Regards