AV Alert from JetAudio Plus

[SteveTetch]

I’ve Used Cowon’s JetAudio Plus app for several years to play music and videos on my PC. I bought a lifetime license a few years ago while using Version 6 (?) and I’m now using v 8.17. I like it a lot.

Recently, I decided to perform a boot scan using my AntiVirus product, BitDefender Total Security. I usually let the custom and full scans run as scheduled and I’m used to a warning at the end that advises that “some files couldn’t be scanned as they’re password protected” (or words to that effect). I’d always assumed that this referred to several of my documents, which have passwords assigned on save by MS Word. I didn’t look any closer, although obviously I should’ve.

The boot scan works in a slightly different way, in that it highlights each passworded file as it’s discovered. I was surprised this morning to find the first file so highlighted was ‘jetUpdate.dat’, a 267Kb file in the folder ‘C:\Program Files (x86)\JetAudio\’. It has a companion file, ‘jetUpdate.exe’, (446 Kb) in the same folder.

I have no idea why this file should be secured by a password. It isn’t something I’ve done and no other apps installed on my PC, (and there are a fair few), are highlighted in the same way. The only reason I could possible imagine this would be necessary would be if part of the contents of the dat file match a known virus signature and the sequence can’t be amended without affecting the functionality of the process its used for. Seems odd, though.

I tried Googling for more information, but all that was returned were occurrences in various AV log files that had been posted in one or two support forums by people raising different issues. The entries relating to JetAudio weren’t referred to in detail. The existence of these logs leads me to believe that this situation is to be expected and I don’t have anything to be concerned about. There weren’t many examples, however, and I still have questions.

I’ve emailed the parent company, but I’m not sure I expect a response. Although the copyright date on their website is 2020, links on their support page that point to an archive of their community forum – shut down several years ago – don’t work. The most recent update on their FaceBook page was in 2013 and their most recent tweet (“Our office is moving”) was December 2014.

Are there any other Users of JetAudio out there? If so, (and I’m sure there must be a few), I’d be grateful if you could confirm whether this is a normal situation and no further action is necessary by me. If it is normal, I still find it puzzling that JetAudio is the only one of my many applications that chooses to password a seemingly innocuous support file in this way?

Thank you in advance.

Reply | Quote

[Microfix]

Have you tried double checking the ‘jetUpdate.exe’ with VirusTotal?
If nothing comes up, it’s possibly a False+ by your AV
If something does show up, attach a screenshot(png or Jpeg) and we can investigate further.

1 user thanked author for this post.

SteveTetch

Reply | Quote

[SteveTetch]

Thanks for your response, Microfix.  It’s not that the file produces an active alert of potential infection.  It’s that BitDefender says the file is passworded and therefore can’t be processed.

I’ve not used VirusTotal before, but it doesn’t seem to have the same problem.  It identified the file as an encrypted zip file and reports “No engines detected in this file”, which is comforting.

It’s just annoying that Bitdefender – winner of a several of Best AV 2021 polls – can’t deal with the file as easily and throws up a protest each time it tries.

Thanks again.

Reply | Quote

[Microfix]

Good to read that VT has cleared it 🙂
On reflection and my misinterpretation, perhaps it’s a security lock by Cowon’s JetAudio Plus so that tampering with the update channel is not permitted.
Wait to see if anyone who has the same software chimes in, otherwise I’d ignore it

edit: you could make an exception in bitdefender see here on how to go about it (half way down the page)

Reply | Quote

[Author]

Posts