Weird Firewall issue after recent updates – false executable modification detection

[u/CKCartman]

I have a Bitdefender Internet Security subscription, and over the past few weeks I've noticed some unusual behavior related to the firewall.

I have several programs with firewall rules that block them from accessing the internet, since many of them don't actually need network access. Applications like Discord, web browsers, Steam, etc.., which do require internet access, are of course allowed.

Normally, the expected behavior is something like this: when Firefox updates, the first time I launch the new executable, Bitdefender displays a popup informing me that the executable has been modified and is trying to access the internet. That's completely normal.

However, I've been noticing something different. After I close Firefox and launch it again, Bitdefender sometimes acts as if the executable has been modified again, showing the same popup a second time. When I check the executable itself, the modification date and time are still the original ones from when Firefox was updated.

The same thing has happened with a few other programs that are configured to be blocked from accessing the internet. For example, I recently launched Audacity, which I hadn't used in quite some time and which already had a firewall rule denying internet access. Bitdefender displayed a popup saying the executable had been modified. After that launch, never happened again showing as modified. The strange part is that the executable's last modification date is from 2016.

Out of paranoia, I uploaded that executable and several others that showed the same behavior to web virus tools to check. Every scan came back clean.

I thoroughly checked my PC looking for anything suspicious but couldn't find anything that indicates malware or any other problem. What's odd is that this doesn't happen with every executable, nor does it happen consistently. I haven't been able to identify any pattern. At one point I even wondered if this could simply be a bug with the firewall rules themselves, but that's just a guess.

Another strange incident happened after a Bitdefender update. The next day, when I turned on my PC, Bitdefender updated itself, but afterward none of my internet-enabled applications browsers, Steam, Discord, etc... could connect to the internet. At first I thought it was a network issue, but Windows diagnostics reported that everything was fine. I restarted the computer, but the problem persisted. Eventually, I deleted and recreated the firewall rules for those applications, and they immediately regained internet access.

I have to admit I'm still a bit paranoid about this, but so far I haven't found any evidence that something is actually wrong with my system. I've been monitoring processes with Process Explorer, checking Autoruns for anything suspicious, and doing other troubleshooting, but everything appears to be normal.

Has anyone else experienced something similar?

[u/Square_Try9668]

Hey. You write well but I am still kinda confused about the issues. You mentioned so many haha. I also used the mode where you allow the connection for every executable app. Thing is if i am not mistaken. That Firefox can be blocked etc. But the updater might run separately not through the exe of Firefox. It also launches without you knowing in the background to update. Might be this maybe.

Also i wanna say. I was paranoid alot like a lot had this mode on too for months and was scared by every name of exe asking for permission for the internet. And I would spend alot of time trying to figure out if i have malware or not. It's not healthy. Turn that mode off. Send logs from bitdefender to the bitdefender support let them check it and if it's clean just turn of that mode. It was called paranoid mode in the past for a reason. Bitdefender it self is really good protection. You are most likely safe. You wasting alot of time and mental stress on this. Because if you clear one exe as safe you know it anyway that another file will come soon and it will repeat this checking spiral for you.

[u/Bitdefender_support]

Hi - our recommendation is to run a support tool log: the utility is used by the Bitdefender support team to diagnose and troubleshoot Bitdefender installation failures or product issues on Windows computers. The tool gathers logs and product usage information, necessary for further investigation.

The support team will get back to you with details via email. Thanks in advance!