# Microsoft Defender reports Java.Trojan.GenericGBA.31025 during SonarLint update

**URL:** <https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102>\
**Category:** IntelliJ Platform\
**Tags:** security, intellij, cfamily, sonarqube-ide\
**Created:** [January 27, 2022, 6:57am UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102 "2022-01-27T06:57:18Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Didier\_Broca](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/didier_broca/32/29636_2.png) [@Didier\_Broca](https://community.sonarsource.com/u/Didier_Broca)\
**Post date:** [January 27, 2022, 6:57am UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/1 "2022-01-27T06:57:18Z")

</div>

Hi,  
I received a message from Microsoft Defender after the upgrade of my IntellijIdea SonarLint plugin.  
Java.Trojan.GenericGBA.31025 in sonarlint-intellij/plugins/sonar-cfamilly-plugin-6.29.0.41127.jar

Is it a really issue ? Do you need other details ?

Regards,  
Didier

---

<div class="post-metadata">

**Author:** ![duncanp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/duncanp/32/293_2.png) [@duncanp](https://community.sonarsource.com/u/duncanp)\
**Post date:** [January 27, 2022, 10:35am UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/2 "2022-01-27T10:35:46Z")

</div>

Hi @Didier_Broca - welcome to the community!

We were made aware of the issue yesterday by another user. After investigations by the our security team and the CFamily team, we don’t believe there is an issue with any version of the analyzer. We will submit a [FP report](https://www.microsoft.com/en-us/wdsi/filesubmission) to Microsoft, although based on past experience this can take several days to be processed.

However, MS Defender doesn’t complain about the newest version of the CFamily analyzer (v6.30), so we will release a new version of SonarLint for IntelliJ that embeds that version today.

Thanks for reporting this.

---

<div class="post-metadata">

**Author:** ![Didier\_Broca](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/didier_broca/32/29636_2.png) [@Didier\_Broca](https://community.sonarsource.com/u/Didier_Broca)\
**Post date:** [January 27, 2022, 11:04am UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/3 "2022-01-27T11:04:34Z")

</div>

Hi @duncanp ,  
Thank you for your quick answer.

Thank you for your work & for this product.  
Regards,  
Didier

---

<div class="post-metadata">

**Author:** ![Damien\_Urruty](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/damien_urruty/32/43383_2.png) [@Damien\_Urruty](https://community.sonarsource.com/u/Damien_Urruty)\
**Post date:** [January 27, 2022, 2:12pm UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/4 "2022-01-27T14:12:26Z")

</div>

Hello @Didier_Broca,

The new version has just been released on the Marketplace. Could you update and check that the problem disappears ?

---

<div class="post-metadata">

**Author:** ![Didier\_Broca](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/didier_broca/32/29636_2.png) [@Didier\_Broca](https://community.sonarsource.com/u/Didier_Broca)\
**Post date:** [January 28, 2022, 10:01pm UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/5 "2022-01-28T22:01:47Z")

</div>

No more warning with 6.4.3.42541 installed.

Thanks

---

<div class="post-metadata">

**Author:** ![duncanp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/duncanp/32/293_2.png) [@duncanp](https://community.sonarsource.com/u/duncanp)\
**Post date:** [February 3, 2022, 3:45pm UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/6 "2022-02-03T15:45:15Z")

</div>

Update: Microsoft Defender with “Security intelligence version: 1.357.42.0” no longer complains about `sonar-cfamily-plugin-6.29.0.41127.jar`, nor do a range of other anti-virus providers: see [VirusTotal](https://www.virustotal.com/gui/file/06bebaebb3361e18adf8dd2731f25c71273166741ba83b5452655b38fd1848e1/detection)

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/system/32/31083_2.png) [@system](https://community.sonarsource.com/u/system)\
**Post date:** [February 10, 2022, 3:46pm UTC](https://community.sonarsource.com/t/microsoft-defender-reports-java-trojan-genericgba-31025-during-sonarlint-update/57102/7 "2022-02-10T15:46:03Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.
