JacobSB Posted May 10, 2018 ID:1241990 Share Posted May 10, 2018 Hello! mwbytes is the only av that detects this file. I think this might be a false positive, i'm not sure though. This file was in Shotcut directory, it is video editing software. Based on my google search I think this is some library for video editing. libdl.zip Link to post Share on other sites More sharing options...
RampageZed Posted May 10, 2018 ID:1242004 Share Posted May 10, 2018 Hey, I just discovered the same exact thing. Even created an account here just to reply to you. I also hope that this is a false positive, since Shotcut is an open source program and seems rather impossible for them to ship a trojan. If I let Malwarebytes delete this Shotcut doesn't start at all. Link to post Share on other sites More sharing options...
thisisu Posted May 10, 2018 ID:1242010 Share Posted May 10, 2018 Thanks for reporting. It's a false positive and will be fixed in the next update. Link to post Share on other sites More sharing options...
thisisu Posted May 10, 2018 ID:1242016 Share Posted May 10, 2018 Fixed in: MBAM2 Version: v2018.05.10.07MBAM3 Version: 1.0.5062 Link to post Share on other sites More sharing options...
chas49 Posted May 11, 2018 ID:1242086 Share Posted May 11, 2018 I am also getting this - current updates installed: Details below. I believe this is a false positive. Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/11/18 Protection Event Time: 11:24 AM Log File: 8613da1b-5505-11e8-9871-2c44fd39e3c2.json Administrator: Yes -Software Information- Version: 3.4.5.2467 Components Version: 1.0.342 Update Package Version: 1.0.5068 License: Premium -System Information- OS: Windows 10 (Build 16299.371) CPU: x64 File System: NTFS User: System -Blocked Malware Details- File: 1 Trojan.Wdfload.TskLnk, C:\Program Files (x86)\get_iplayer\perl\lib\auto\IO\IO.xs.dll, Quarantined, [8403], [520364],1.0.5068 (end) Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted May 11, 2018 ID:1242123 Share Posted May 11, 2018 @chas49 That should be fixed already. Can you try one more scan? It would be nice if you can zip and send the file to us. Thanks! Link to post Share on other sites More sharing options...
chas49 Posted May 11, 2018 ID:1242127 Share Posted May 11, 2018 16 minutes ago, TwinHeadedEagle said: @chas49 That should be fixed already. Can you try one more scan? It would be nice if you can zip and send the file to us. Thanks! OK - will do that. Just to clarify - are you asking for the log files in the zip, or the false positive dll file? Thanks Charles Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted May 11, 2018 ID:1242128 Share Posted May 11, 2018 DLL file. If it is not detected anymore, then you don't need to attach it. Link to post Share on other sites More sharing options...
chas49 Posted May 11, 2018 ID:1242132 Share Posted May 11, 2018 4 minutes ago, TwinHeadedEagle said: DLL file. If it is not detected anymore, then you don't need to attach it. Tested and it's no longer detected (update package version 1.0.5070) - the detection was in 5068, so it has been fixed. Thanks for the help Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now