bitPimps Posted November 6, 2020 ID:1418999 Share Posted November 6, 2020 Hi, This morning when I started my computer, Malwarebytes quarantined AdobeXMP.dll It classified it as Nymaim.Trojan malware. Is this a false positive? I have attached the log of the quarantined file. Malwarebytes-quarantine-log.txt Link to post Share on other sites More sharing options...
jfg95 Posted November 6, 2020 ID:1419020 Share Posted November 6, 2020 Same for me. Started today as well. Seems related to an old version of Adobe Acrobat which I still run (8.3.1). @MWB wizards ... any idea for a solution ? Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted November 6, 2020 ID:1419031 Share Posted November 6, 2020 Hi, Thank you for reporting, it is fixed now. Link to post Share on other sites More sharing options...
jfg95 Posted November 6, 2020 ID:1419090 Share Posted November 6, 2020 4 hours ago, TwinHeadedEagle said: Hi, Thank you for reporting, it is fixed now. Errr ... doesn't seem so ... the old version of this AdobeXMP.dll which went with Adobe Acrobat 8.3.1 still triggers the same "Nymaim.Trojan" detection for me. This specific dll version was "Adobe XMP Core 4.0-c321" i.e. version 4.0.0.321 (389,120 bytes). I checked more recent versions of this same-named dll installed with more recent versions of other pieces of Adobe software using it, and they have no issue. Since my earlier post, my MWB had automatically updated to v 4.2.3.96 / update package version 1.0.32546 and component package version 1.0.1104, and I did restart as indicated before rechecking the AdobeXML.dll, which gets quarantined right away. I am happy to set it as exception in MWB, as long as you kindly confirm that it is indeed a false positive. Please let me know any more info you would need. I am attaching the restored AdobeXML.dll in a zip archive, if that could help. AdobeXMP.zip Link to post Share on other sites More sharing options...
Staff Atribune Posted November 7, 2020 Staff ID:1419269 Share Posted November 7, 2020 Could you please rescan and let us know if you are still receiving the detection? Link to post Share on other sites More sharing options...
jfg95 Posted November 7, 2020 ID:1419280 Share Posted November 7, 2020 1 hour ago, Atribune said: Could you please rescan and let us know if you are still receiving the detection? Whatever it is that you did ... thank you!!! After hitting the manual MWB update button (just in case), restored this (formerly doomed) AdobeXML.dll from quarantine, rescanned and… it passed with flying colors. ... and my Adobe Acrobat 8.3.1 is now alive and kicking again... Thanks a million! Best. JFG Link to post Share on other sites More sharing options...
TonyCummins Posted November 10, 2020 ID:1419868 Share Posted November 10, 2020 Got hit with this this morning...i thought it was fixed? Users complain they cant "scan" this AMC:\Program Files (x86)\fiScanner\PaperStream Capture\PSCPDFLib\AdobeXMP.dll Link to post Share on other sites More sharing options...
jfg95 Posted November 10, 2020 ID:1419936 Share Posted November 10, 2020 There are many published many versions of this AdobeXLM.dll. I confirm hat it is now fixed for mine (dll version 4.0.0.321 shipped with an ancient Adobe Acrobat 8.3.1), but I suspect that yours is different and might require a new update by MWB staff. Link to post Share on other sites More sharing options...
Staff Atribune Posted November 10, 2020 Staff ID:1419966 Share Posted November 10, 2020 TonyCummins, please zip and attach the file so we can take a closer look. Link to post Share on other sites More sharing options...
TonyCummins Posted November 10, 2020 ID:1419970 Share Posted November 10, 2020 @Atribune Here is the file attached. Located in following location: C:\Program Files (x86)\fiScanner\PaperStream Capture\PSCPDFLib\AdobeXMP.dll Thanks AdobeXMP.zip Link to post Share on other sites More sharing options...
Staff Atribune Posted November 11, 2020 Staff ID:1420039 Share Posted November 11, 2020 Thanks, this should be fixed now. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now