Bitdefender warns of "Gen:Variant.Lazy.593326" attack; why?

Canberk · 2024-10-25T11:49:54+00:00

There was an error rendering this rich post.

Hello all,

Bitdefender warns Gen:Variant.Lazy.593326 when an alarm runs on the “Atomic Alarm Clock” software and initiates cleanup. I think this is a false positive, if it is not a false positive I don't understand why:

I have been using the software for many years
Bitdefender does not show alerts most of the time; reminder alarm works properly
Attack warning started to appear two-three weeks ago

When Bitdefender starts cleanup, explorer and open programs close. So my work was interrupted.

Find more posts tagged with

Accepted answers

All comments

Flexx

https://community.bitdefender.com/en/discussion/101935/bitdefender-warns-of-gen-variant-lazy-593326-attack-why

If you believe that a website or file has been incorrectly blocked by Bitdefender, you can share the details with our malware researchers by filling out the form at the link provided below:

https://www.bitdefender.com/consumer/support/answer/29358/

If the website or file is indeed incorrectly blocked, the detection will be removed within a maximum of 72 hours. However, if the detection still persists after 72 hours, please consider the website or file as malicious, as determined by our malware researchers, and the detection will remain.

Regards

Canberk

First of all, let me give some additional information:

I just realized that this warning is not only for “Atomic Alarm Clock”. Simultaneously, it also gave a different warning for “7+ Taskbar Tweaker”.
I run these two programs at startup, and Bitdefender blocks them and any software that is open with them after the attack warning. Then it starts a cleanup process. After everything is done, I restart the computer and all the blocked software runs. So it doesn't quarantine either.

Flexx

https://community.bitdefender.com/en/discussion/comment/345505#Comment_345505

Advanced Threat Defense is essentially a behavior-based blocking feature that monitors the behavior of files rather than relying on signatures for detection. As such, it may block files based on their actions. The only option here is to add the specific software executable file to the exclusion list in the Advanced Threat Defense of your Bitdefender product.

Set exclusions in Bitdefender Advanced Threat Defense: https://www.bitdefender.com/consumer/support/answer/2393/

Regards

Canberk

I don't want to make things difficult. But adding it to the exclusion list is not a solution. Maybe Bitdefender really is detecting an attack.

With all due respect, the simplest way is to put the responsibility on the user.

It is expected behavior for a software whose job is to "remind" to warn when the time comes. It is unexpected behavior for Bitdefender to detect this as an attack.

However, when the alarm goes off, Bitdefender simultaneously gives this warning for another software, which makes things even more strange.

I followed your initial advice and sent the software file (with a link to this thread) for analysis. I hope they will take note of this weird problem and solve it.

Flexx

https://community.bitdefender.com/en/discussion/comment/345516#Comment_345516

Nice to know you have shared the file with the malware researchers. Usually, the maximum time taken for file analysis is 72 hours, based on the order in which the tickets are received by the malware research team. However, on weekends, it may take longer.

Regards