Two files flagged as trojan by Bitdefender Virus Scanner inside prl-tools-win.tar.gz

[Mitch Conner]

I have Parallels Desktop 18.3.3 for Mac, and a Windows 11 virtual machine that has Parallels Tools installed. A "Deep System Scan" using Bitdefender Virus Scanner version 3.17 reports the that file '/Applications/Parallels Desktop.app/Contents/Resources/Tools/prl-tools-win.tar.gz' contains two trojans:

Threat Name (for both contained files):
Gen:Trojan.Heur2.FU.cu2@a8pzswoi

Paths to infected files:
/Applications/Parallels Desktop.app/Contents/Resources/Tools/prl-tools-win.tar.gz=>prl-tools-win.tar=>Data/ARM64/ParallelsTools-ARM64.msi=>(Embedded CAB)=>mapi32_exe
/Applications/Parallels Desktop.app/Contents/Resources/Tools/prl-tools-win.tar.gz=>prl-tools-win.tar=>Data/x64/ParallelsTools-x64.msi=>(Embedded CAB) =>mapi32_exe

Is this true or a false positive?

 

[megavolt17]

Bitdefender for Mac has "gone crazy" lately. It also flags many files in CrossOver as being infected (and deletes them, inactivating CrossOver).

I have set Bitdefender Mac to exclude my Parallels files and VM, and my CrossOver files from scanning. I have scanned the same files (with no issues found) using Bitdefender PC running in Parallels.

On a full scan Bitdefender Mac has now started deleting files in my Time Machine archives. Per Bitdefender Mac it is not supposed to scan Time Machine files (making changes can corrupt the whole backup). I have now manually excluded my Time Machine backups from Bitdefender.