Ditto.exe detected as malware

[flatlinebb]

BitDefender is detecting the Ditto executable as malware and it keeps blocking from functioning:

Detection details
THREAT INFO
Threat type:
Virus
Threat name:
Gen:Variant.Lazy.231576
Detected on:
10 Aug 2022 10:21
Action taken:
Blocked (1 times)
Detecting module:
Antimalware
Detecting technology:
On-Access
FILE INFO
Category:
File
File path:
C:\Program Files\Ditto\Ditto.exe
SHA256:
f0657b4613f91bd8f6a676f9e30a61b53bfb522ec8c727178d99105ee22ee40c

I keep adding it exceptions, but it isn't effective - BitDefender just keeps deleting it.

[SeriousHoax]

BitDefender is detecting the Ditto executable as malware and it keeps blocking from functioning:

Detection details THREAT INFO Threat type: Virus Threat name: Gen:Variant.Lazy.231576 Detected on: 10 Aug 2022 10:21 Action taken: Blocked (1 times) Detecting module: Antimalware Detecting technology: On-Access FILE INFO Category: File File path: C:\Program Files\Ditto\Ditto.exe SHA256: f0657b4613f91bd8f6a676f9e30a61b53bfb522ec8c727178d99105ee22ee40c

I keep adding it exceptions, but it isn't effective - BitDefender just keeps deleting it.

Looks like the false positive has been fixed. BTW, is this an Enterprise Edition of Bitdefender? If I remember correctly, the home versions don't have such detailed log with hash.

[flatlinebb]

Yes, it's the Enterprise version. I run Ditto on my work laptop. Can't live without it.

…

On Thu, Aug 25, 2022 at 3:40 AM SeriousHoax ***@***.***> wrote: BitDefender is detecting the Ditto executable as malware and it keeps blocking from functioning: [image: image] <https://user-images.githubusercontent.com/4769578/183977766-029f7d99-b8ed-4706-8e3d-4c680cd7ca41.png> Detection details THREAT INFO Threat type: Virus Threat name: Gen:Variant.Lazy.231576 Detected on: 10 Aug 2022 10:21 Action taken: Blocked (1 times) Detecting module: Antimalware Detecting technology: On-Access FILE INFO Category: File File path: C:\Program Files\Ditto\Ditto.exe SHA256: f0657b4613f91bd8f6a676f9e30a61b53bfb522ec8c727178d99105ee22ee40c I keep adding it exceptions, but it isn't effective - BitDefender just keeps deleting it. Looks like the false positive has been fixed. BTW, is this an Enterprise Edition of Bitdefender? If I remember correctly, the home versions don't have such detailed log with hash. — Reply to this email directly, view it on GitHub <#322 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABEMOKTWUJKCKTVNJ34TQRLV25EQHANCNFSM56FKXPIA> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[SeriousHoax]

Yes, it's the Enterprise version. I run Ditto on my work laptop. Can't live without it.
…
On Thu, Aug 25, 2022 at 3:40 AM SeriousHoax @.> wrote: BitDefender is detecting the Ditto executable as malware and it keeps blocking from functioning: [image: image] https://user-images.githubusercontent.com/4769578/183977766-029f7d99-b8ed-4706-8e3d-4c680cd7ca41.png Detection details THREAT INFO Threat type: Virus Threat name: Gen:Variant.Lazy.231576 Detected on: 10 Aug 2022 10:21 Action taken: Blocked (1 times) Detecting module: Antimalware Detecting technology: On-Access FILE INFO Category: File File path: C:\Program Files\Ditto\Ditto.exe SHA256: f0657b4613f91bd8f6a676f9e30a61b53bfb522ec8c727178d99105ee22ee40c I keep adding it exceptions, but it isn't effective - BitDefender just keeps deleting it. Looks like the false positive has been fixed. BTW, is this an Enterprise Edition of Bitdefender? If I remember correctly, the home versions don't have such detailed log with hash. — Reply to this email directly, view it on GitHub <#322 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABEMOKTWUJKCKTVNJ34TQRLV25EQHANCNFSM56FKXPIA . You are receiving this because you authored the thread.Message ID: @.>

I also use Ditto, but it's not detected anymore. Bitdefender has fixed the false positive.

[sjvudp]

I also use Ditto, but it's not detected anymore. Bitdefender has fixed the false positive.

Anyway, the correct address would have been Bitdefender for the false alert. The author of Ditto has probably little influence on what Bitdefender does. Some "security tools" are just stupid.

[SeriousHoax]

I also use Ditto, but it's not detected anymore. Bitdefender has fixed the false positive.

Anyway, the correct address would have been Bitdefender for the false alert. The author of Ditto has probably little influence on what Bitdefender does. Some "security tools" are just stupid.

Yes, submitting to the vendors should be the way to go if someone is sure about something not being a malware. Most well-known security vendors are quick to fix false positives once reported.