False Positive - Trojan.Crypt - IM_MOD_RL_caption_.dll ? [SOLVED by db 1059]

[danielchangus]

I uploaded the suspected file to IObit Cloud and it said the Cloud Scan was SAFE. Here's the link to the successful scan report.

 

I did a massive scan (i.e., with Norton, etc.) and the only one that found it was IObit Malware Fighter.

 

________________________________________

REPORT

 

IObit Malware Fighter

 

OS: Windows Vista

Version: 1.1.1.2

Define Version: 1058

Time Elapsed: 07:21:08

Objects Scanned: 80296

Threats Found: 1

Save Time: 9/3/2011 9:23:37 AM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

 

________________________________________

VIRUSTOTAL

Also though I uploaded it to VirusTotal and it showed that there were two others who had the same problem:

 

------------

USER 1

 

User:

Anonymous

Reputation:

1 credits

Comment date:

2011-07-20 14:03:27 (UTC)

IObit Malware Fighter

 

OS: Windows 7

Version: 1.1.0.8

Define Version: 1045

Time Elapsed: 00:04:25

Objects Scanned: 52002

Threats Found: 2

Save Time: 7/20/2011 3:10:47 PM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

Tags: Malware,

 

------------

USER 2

 

User:

Anonymous

Reputation:

1 credits

Comment date:

2011-07-29 12:09:43 (UTC)

IObit Malware Fighter

 

OS: Windows 7

Version: 1.1.1.2

Define Version: 1048

Time Elapsed: 00:04:50

Objects Scanned: 52414

Threats Found: 1

Save Time: 7/29/2011 1:10:58 PM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

Tags: Malware,

[enoskype]

Hidanielchangus, welcome to IObit Forum! :grin:

 

Porbably false positive, but you can upload the file to www.wikisend.com and give the link here for IObit to further investigate it.

 

Cheers.

[danielchangus]

Thanks for the quick response! Will do that then.

[NexRad]

Link for the possible false positive

 

I was researching the file mentioned above, IM_MOD_RL_caption_.dll, and decided to upload it to wikisend. Here is the link so you guys can inspect it as I got a hit on it as a Trojan.Crypt.

IM_MOD_RL_caption_.dll

 

Thanks for everything,

Nex

[hxin]

I uploaded the suspected file to IObit Cloud and it said the Cloud Scan was SAFE. Here's the link to the successful scan report.

 

I did a massive scan (i.e., with Norton, etc.) and the only one that found it was IObit Malware Fighter.

 

________________________________________

REPORT

 

IObit Malware Fighter

 

OS: Windows Vista

Version: 1.1.1.2

Define Version: 1058

Time Elapsed: 07:21:08

Objects Scanned: 80296

Threats Found: 1

Save Time: 9/3/2011 9:23:37 AM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

 

________________________________________

VIRUSTOTAL

Also though I uploaded it to VirusTotal and it showed that there were two others who had the same problem:

 

------------

USER 1

 

User:

Anonymous

Reputation:

1 credits

Comment date:

2011-07-20 14:03:27 (UTC)

IObit Malware Fighter

 

OS: Windows 7

Version: 1.1.0.8

Define Version: 1045

Time Elapsed: 00:04:25

Objects Scanned: 52002

Threats Found: 2

Save Time: 7/20/2011 3:10:47 PM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

Tags: Malware,

 

------------

USER 2

 

User:

Anonymous

Reputation:

1 credits

Comment date:

2011-07-29 12:09:43 (UTC)

IObit Malware Fighter

 

OS: Windows 7

Version: 1.1.1.2

Define Version: 1048

Time Elapsed: 00:04:50

Objects Scanned: 52414

Threats Found: 1

Save Time: 7/29/2011 1:10:58 PM

 

|Name|Type|Description|ID|

Trojan.Crypt, FILE, C:\Program Files (x86)\Calibre2\DLLs\IM_MOD_RL_caption_.dll, 4070231

Tags: Malware,

 

Hi danielchangus

 

After investigation, we have assured that it's a false positive. Sorry for the trouble we have caused to you.

 

We will solve this issue in our later update definition 1059.

 

Thanks for your support.