Page 1 of 1

Incorrect Anti-Virus detections (updated 2021-6-10)

Posted: Mon May 03, 2021 6:51 pm
by bll
Windows Defender and other Anti-Virus products are detecting BallroomDJ.exe as malware.

This is incorrect.

There is no malware in the BallroomDJ distribution.

At this time, I recommend adding the BallroomDJ folder (often C:\Users\your-user-name\Desktop\BallroomDJ or
C:\Users\your-user-name\BallroomDJ) as an exclusion to Windows Defender.

Avast has updated their definitions.
I believe Symantec is also fixed.
There does not appear to be any easy way to submit false positives to McAfee.

MicroSoft has fixed the issue:
Analyst comments:


We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions

Re: BallroomDJ and incorrect Anti-Virus detections....

Posted: Thu Jun 10, 2021 3:57 am
by bll
For Windows 8 32-bit:
I don't know why I have to submit this twice to microsoft. Weird.
Analyst comments:


We have removed the detection. Please follow the steps below to clear cached detection and obtain the latest malware definitions.

1. Open command prompt as administrator and change directory to c:\Program Files\Windows Defender
2. Run “MpCmdRun.exe -removedefinitions -dynamicsignatures”
3. Run "MpCmdRun.exe -SignatureUpdate"

Alternatively, the latest definition is available for download here: https://www.microsoft.com/en-us/wdsi/definitions