Malware in Bambu Studio!

Today I’ve updated Bambu Studio to version 01.08.04.51.
At the end of installation process, my antivirus notified me:
“File Uninstall.exe was moved to quarantine, because there was found out threat Win32:Malware-gen.”
Babmu guys, are you serious? You are putting malware to Bambu Studio???

This is a very generic finding which means basically your AV thought the program might be capable of doing something underhanded, but it is NOT a known virus or malware. It is quite often seen in PUPs (potentially unwanted programs) that side installs when you install a free program. You know the type, you install Driver Booster and if you don’t pay attention it will install a VPN and some other stuff too. Those extra programs are called PUPs.

It can also be caused by lazy programmers doing things in a “fast and easy” way instead of using industry best practices.

I wouldn’t worry about it too much, we already know BL is spying on us, heh.

Hmmm, interesting. I have installed hundreds apps in my life, but Bambu Studio 01.08.04.51 was the first one behaving like that :confused:

Blockquote
I wouldn’t worry about it too much, we already know BL is spying on us

That is why there is a camera in the printer :slight_smile:

spying…and collecting all our printed files in their cloud… though no copyright infringement claims have popped up yet, (sooner or later) that might eventually happen… so don’t be surprised when it does…

1 Like

I just hope that the “LAN only” mode works as it’s advertised…

Relax… take a deep breath… exhale slowly.

If you get a malware warning from software you’re installing, there is 99.999% chance that your malware detection is the one that’s broken not the app itself.

End point protection has been a joke since the mid-2000s. For a while it was a great money maker for us in tech because it played off the FUD factor. But now it’s baked into every appliance and OS. Real threats now use the Human Being and social engineering as the vector to exploit vulnerabilities. That’s what people need to be educated on. But sadly, digital literacy is missing from our schools and corporate training.

If you get a warning when you aren’t installing something, that’s when you should be worried. That’s an indicator that something may be doing something naughty without your permission.

1 Like

That IS called a “false positiv”.

3 Likes

Nothing flagged on my end when installing the update. Must be your antivirus.

2 Likes

Cloud services should be optional without locking you out of activating your printer, updating and downgrading the printer, camera, and networking. All are doable without an unnecessary internet connection.

Of course it makes sense. Being in IT I see it all the time. In fact, just yesterday I was working on a State computer that a police department uses to look up driver’s license data and criminal histories, it was failing to display data correctly. Turns out that the programmers for the State software neglected to update a security certificate that was had expired and Java was refusing to run part of the app because of that. All they had to do was click a button to force the installation of the new certificate in the program update. Whoops! Stuff happens.

It is amazing how sometimes folks jump to conclusions when they see an OS message popup without taking the time to Google the message and gain a deeper understanding of what is actually happening.

Although I haven’t done any software development on a paid basis in over 20 years, I still keep an updated development suite on at least one system in my lab. What makes me shake my head is when I’ve written something myself that uses no external libraries, so I am the author and know what’s in the code, right? But still, I get a malware message from time to time because the hash for that little snippet of code just so happened to match the hash of a known threat. This is why I say that end-point protection has been a joke for at least 20 years. It’s analogous the smoke detector that goes off all the time because it happens to be in the wrong location. Eventually people just ignore it. It’s the digital equivalent of crying wolf. :wolf:

2 Likes

I have a love/hate relationship with Antivirus. It has been great at preventing idiots in my company from downloading/installing things that they really shouldn’t be, while simultaneously creating more work than is necessary to filter through all the false positives and trying to mitigate all the noise. It’s all the new heuristics and “AI detection” ■■■■ they put in modern AV software to look for zero day stuff.

To the OP, I doubt you need to worry too much, but if you are still concerned and want to make an informed decision, you can chuck the executable into VirusTotal, JoeSandbox, and/or reach out to your Antivirus company’s support to have them take a look at the file.

Guessing you have something like AVG or one of the commonly pushed AV’s that gives nothing but false positives.

Or antivirus of yours :laughing: :laughing: :laughing: