Win32/Bearfoos.A!ml Trojan

[DBFig]

I went to install on Win11, and Windows Defender immediately flagged as this type of Trojan. Wanted to let you know, in case there is anything you can do to address it.

[matoom]

I'm afraid not.

I am aware of other users running into this issue before but again i don't have much to work with what is given.

From what i can find searching around the internet is that this refers to some sort of a machine learning or ai based virus detection method and there is nothing as to what exactly causes this. It doesn't seem like a specific virus signature or anything that refers to a known virus. As far as i know it could be anything.

For example: https://www.reddit.com/r/antivirus/comments/1kujhjb/trojanwin32bearfoosaml_what_kind_of_malware_is/

It's also interesting that i'm running windows defender on win11 and i tried installing from GitHub but got no issues here.

And tried a couple of other online scanners but didn't get any hits from there either (another one got me a similar vague trojan warning).

[matoom]

I went through a few more searches and stumbled upon a comment on the microsoft forums and there is someone saying they got this trojan triggered by an app that listens to commands on a UDP port.

https://learn.microsoft.com/en-us/answers/questions/4071492/a-trojan-virus-that-windows-defender-can-t-remedia?forum=windows-all&referrer=answers&page=4#answers

This could be it. I'm listening for script commands on a TCP port. It's not like it accepts any kind of malicious commands but i doubt this machine learning algorithm would know the difference. It's a very atypical application, not many other programs would run scripts like a mud client.