Hot Take G Data what ???

[Harputlu]

The problem isn't with WinRAR, is it?

 

[silversurfer]

View attachment 289438

The problem isn't with WinRAR, is it?

You should check on VT for detection by other AVs

Win32.Trojan.Agent... is known as detection by Bitdefender, that might be False Positive... in this case regarding WinRAR.

 

[Khushal]

You should check on VT for detection by other AVs

Win32.Trojan.Agent... is known as detection by Bitdefender, that might be False Positive... in this case regarding WinRAR.

it is a gdata engine detection

 

[silversurfer]

it is a gdata engine detection

I guess because of B as indicator... or why you are sure?
But I meant, in general also Bitdefender uses the similar term like that Trojan.Win32.Agent...

 

[Khushal]

I guess because of B as indicator... or why you are sure?
But I meant, in general also Bitdefender uses the similar term like that Trojan.Win32.Agent...

i have reported same malware to gdata and bitdefender, gdata uses such detections

 

[Shadowra]

I guess because of B as indicator... or why you are sure?
But I meant, in general also Bitdefender uses the similar term like that Trojan.Win32.Agent...

Bitdefender is Engine A
CloseGap (Gdata) is Engine B

 

[SeriousHoax]

I guess because of B as indicator... or why you are sure?
But I meant, in general also Bitdefender uses the similar term like that Trojan.Win32.Agent...

It's normal to get confused because Emsisoft in their product calls their own engine, A and Bitdefender's, B. The opposite is true for G-Data.

 

[SpiderWeb]

GData is right. Highly suspicious why anyone would still use WinRAR in 2025. But, seriously. This is an old problem where AVs don't like archivers because they behave like ransomware in their ability to mass encrypt files. I would say out of abundance of caution. Delete and re-download from a reputable source. If it's still getting flagged, ignore.

 

[Parkinsond]

Highly suspicious why anyone would still use WinRAR in 2025

W build-in tool cannot extract password-protected compressed file.

 

[Harputlu]

GData is right. Highly suspicious why anyone would still use WinRAR in 2025. But, seriously. This is an old problem where AVs don't like archivers because they behave like ransomware in their ability to mass encrypt files. I would say out of abundance of caution. Delete and re-download from a reputable source. If it's still getting flagged, ignore.

The strange thing is that WinRAR continued to work without any problems even after I deleted those files. Still, I uninstalled WinRAR.

 

[Parkinsond]

The strange thing is that WinRAR continued to work without any problems even after I deleted those files. Still, I uninstalled WinRAR.

WinRAR is safe; even its activator (reg file) is safe.
Might be some temp files related to extracted compressed file which contained suspicious files inside.

 

[RoboMan]

The problem isn't with WinRAR, is it?

As to replicate the scenario, are you using an original or a pirated copy of the software? Also, are you using the latest version or a previous build?

 

[Harputlu]

As to replicate the scenario, are you using an original or a pirated copy of the software? Also, are you using the latest version or a previous build?

I am using the original version. I downloaded it from their website.