Advanced Threat Defense and "SuspiciousBehavior.***"

Advanced Threat Defense is way way to aggressive, it blocks anything which creates and launches a new file and flags it as "SuspiciousBehavior". For example, I cannot use AMD's Bug Report Tool, because, the app creates a temporary files in AppData\Temp folder, after which Bitdefender immediately freaks out, blocks and deletes anything and everything the Bug Report Tool tries to create. I cannot add an exception, because the files are always created in a randomly named folder everytime, so the only way to use the app, is to disable Advanced Threat Defense. This happens to other apps as well, like FanControl, which is blocked whenever it tries to update itself, because the update process requires some temporary files to be created and Bitdefender freaks out again. What can I do? I don't want to disable Advanced Threat Defense, but I don't want it to literally block everything it deems as "SuspiciousBehavior".

Find more posts tagged with

Accepted answers

All comments

Flexx

https://community.bitdefender.com/en/discussion/97306/advanced-threat-defense-and-suspiciousbehavior

Kindly set below temporary files folder in antivirus exception.

C:\Windows\Temp

C:\Users\username (your username name that is shown)\AppData\Local\Temp

Additionally, set the executable (.exe) file the software you use as an exception in advanced threat defense.

This should resolve your issue.

If the issue persists, please contact Bitdefender support by visiting https://www.bitdefender.com/consumer/support/. Depending on the product you've selected and the type of issue you're facing, you can get in touch with a support representative via email, chat, or phone.

If you choose email, you will receive a ticket number in your registered email. Please generate and attach the following logs to the ticket number you received on your registered email:

Generate bitdefender BDsysLog: https://www.bitdefender.com/consumer/support/answer/1922/

Generate bitdefender support tool logs: https://www.bitdefender.com/consumer/support/answer/1733/

Generate bitdefender connectivity logs: https://www.bitdefender.com/consumer/support/answer/9689/

If the generated logs are large, you can upload them to Google Drive or WeTransfer (with a 7-day link validity for free users). Alternatively, you can ask the support team to provide you with the online link and password for Bitdefender Cloud, where you can upload the logs and share the upload link with the support team.

The support team will reply to the same email within the next 24-48 hours, excluding weekends.

Regards

Nandiman

I have to specify some details. There is a temporary folder also created in Temp, which has a random name everytime. Thus setting an exception to C:\Users\username (your username name that is shown)\AppData\Local\Temp won't solve the issue as any folders in Temp will not be excluded.

Here is an example below. How am I supposed to add that to exceptions? (folder nsgC056.tmp is random btw)

Flexx

https://community.bitdefender.com/en/discussion/comment/328948#Comment_328948

Try below steps:

1) Temporarily disable Bitdefender Protection: https://www.bitdefender.com/consumer/support/answer/28557/

2) Try installing your software.

3) Open the Run command and execute the following commands one by one:

temp ,delete all the files in the the folder

%temp% ,delete all the files in the folder

prefetch ,delete all the files in the folder

4) Enable bitdefender protection & run a full system scan.