Possible False Positive? (avutil-56.dll)

[Molly2925]

Hi, I was just letting Malwarebytes do its nightly scan just now, when it found an apparent threat! A DLL file, by the name of "avutil-56.dll", was detected. It was located in the folder for the MEGAsync file transfer desktop app. I've had MEGAsync for a while, and I'm sure its a reputable program given how many people use MEGA's file hosting service, so I doubt it's any kind of malware. Additionally, I uploaded the offending file to VirusTotal to check it, and it got no detections on there either (including Malwarebytes... which is a bit odd). This makes me pretty certain that it's just a false positive, so I'm posting the report and a zip with the file here so that somebody could have a look at it and hopefully fix the issue.

avutil-56.zip MWB-MEGAsync-detection.txt

[Molly2925]

Just as a quick addition, I decided to let MWB delete the file, and for me to reinstall MEGAsync, and even though the same dll is present in the reinstalled version of MEGAsync... MWB is no longer getting a detection on it? I also redownloaded the same copy of the file I had uploaded right there in my initial post, and re-scanned that, and that ALSO didn't get a detection all of a sudden? Did MWB just quickly update and fix the false-positive between me posting this topic and checking again?

[cli]

This detection was whitelisted yesterday (5/11). Your application may have cleared its cache between the time of your posting and you rescanning. Either way glad it's resolved and thanks for reporting. :)

[Molly2925]

Ah, okay, thank you! I did indeed restart my computer between my initial post and the rescan (since the MWB quarantine requires a restart to work properly), so that must have cleared the cache. Didn't know that was a needed thing to get rid of false positives, usually just MWB updates itself and its all good. Glad to know there's no real issue, I always get really worried when something might be the problem...