Solved Bitdefender identifying 3CXMediaserver.exe as gen:variant.razy.620967 malware During Windows v18 install

[Bryan Stevens]

Just went to upgrade a v16 install to v18 and went to install and the installer said it could not find 3CXmediaserver.exe so i looked in Bitdefender logs and it identified it as gen:variant.razy.620967 and deleted the .exe, anyone else have this happen during an install?

 

[nub]

see what virus total thinks of it, I dont have that exe to test. https://www.virustotal.com/gui/home/upload

 

[Bryan Stevens]

Ran it in virus total and 12/68 register it as malware

 

[nub]

Almost certainly this is a false positive, but the paranoid part of me says to save that download to another location for later reference and redownload and try once more.

 

[NickD_3CX]

Hi!

I am pretty sure that it's a false positive too, could you tell me the exact version of 3CX you installed (was it 18.0.1.237 or 18.0.1.234?), and what the MD5 hash is of the specific EXE file?
You can get the MD5 Hash with with command from Windows CMD:

CertUtil -hashfile "C:\Program Files\3CX Phone System\Bin\3CXMediaServer.exe" MD5

Then I can compare it with what comes fresh out of the build machine!

 

[Evolute IT]

Hi!

I am pretty sure that it's a false positive too, could you tell me the exact version of 3CX you installed (was it 18.0.1.237 or 18.0.1.234?), and what the MD5 hash is of the specific EXE file?
You can get the MD5 Hash with with command from Windows CMD:

CertUtil -hashfile "C:\Program Files\3CX Phone System\Bin\3CXMediaServer.exe" MD5

Then I can compare it with what comes fresh out of the build machine!

I can actually confirm this false positive. We experienced this when trying to install 3CX Windows on one of our local servers during v18 Alpha.

It didn't like it lol

 

[Saqqara]

You should exclude 3cx folders from av scanning https://www.3cx.com/docs/manual/phone-system-installation-windows/

C:\Program Files\3CX Phone System\*
C:\ProgramData\3CX\*

 

[Evolute IT]

You should exclude 3cx folders from av scanning https://www.3cx.com/docs/manual/phone-system-installation-windows/

C:\Program Files\3CX Phone System\*
C:\ProgramData\3CX\*

Didn't think of that during our testing lol

Anyway, it was more playing around than actual testing. Our systems are all on Linux. I hate Windows Server with a passion.

 

[garnesdata]

Bitdefender also blocked this service for us. Here is the hash of the file: a1e85bf494153f61ebe2039250c875ce
Running v18 update 1 build 234

 

[NickD_3CX]

Bitdefender also blocked this service for us. Here is the hash of the file: a1e85bf494153f61ebe2039250c875ce
Running v18 update 1 build 234

Yep!
Double-checked, that this is right one, so just a false-positive.