Jump to content
IObit Forum
Top Free Driver Updater Tools Best 25 PC Optimization Software Best 22 Antimalware Best 22 Uninstaller Software IObit Coupons & Discount Offers PC Optimizer

DPPDLL. dll - False positive? [SOLVED by db 1241]


Recommended Posts

Hi monsta,

 

Click on the figure at the right side second from the top http://forums.iobit.com/attachment.php?attachmentid=11804&stc=1&d=1370555702. This will open Quarantine List window.

 

After opening Quarantine List window, tick the checkbox and click Restore button.

 

This will restore the DPPDLL. dll file to :

C:\Program Files (x86)\CyberLink\PhotoDirector\Kernel\Photo

folder.

 

After uploading it, you can quarantine it by scanning with IMF.

 

Cheers.

Link to comment
Share on other sites

Thanks.

 

Managed that and got this:

"

File already analysed

 

This file was already analysed by VirusTotal on 2013-05-28 16:59:52 .

 

Detection ratio: 0/47

 

You can take a look at the last analysis or analyse it again now."

 

I re-analysed and got :

 

"SHA256: de696fb7a95687cf6593f3ddbfe3578b5a4665f4248e83ddf02fbf4fef38ccd7

File name: DPPDLL.dll

Detection ratio: 0 / 47

Analysis date: 2013-06-06 23:23:12 UTC ( 0 minutes ago ) "

 

The initial report from IMF is here:

 

IObit Malware Fighter

 

OS: Windows 8

Version: 2.0.1.6

Define Version: 1240

Time Elapsed: 00:29:23

Objects Scanned: 80683

Threats Found: 1

Save Time: 06/06/2013 11:41:51

 

|Name|Type|Description|ID|

Trojan.Agent, FILE, C:\Program Files (x86)\CyberLink\PhotoDirector\Kernel\Photo\DPPDLL.dll, 4089037

 

I have now scanned and re-quarantined the file, awaiting your advice?

(I have not yet sent it to wiki or cloud).

 

Im scared :oops:

 

Thanks.

Link to comment
Share on other sites

Thanks for the VirusTotal report.

 

It seems that it is a false positive, but please upload it to Wikisend and give the download link here in a post for IObit to further investigate and add to their database.

 

Since it seems to be a false positive, there is nothing to be scared to restore and also upload it to Wikisend.

 

Yo can even keep it at it's original location and not put to Quarantine List.

 

Cheers.

Link to comment
Share on other sites

Hi monsta and enoskype,

 

monsta, thanks for your feedback.

 

I have reported the false positive to our product team and it will be removed by Define Version: 1241.

 

Let's thanks enoskype's detailed and patient instructions.

 

Cheers.:wink:

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...