"spyware.password" in quickbooks a FP? [SOLVED by db 2406]

[jeffc]

When I run IObit Security it keeps finding "spyware.password" in quickbooks, specifically in stlport_r50.dll.

 

When I use IObit to clean the files, it says it has removed the spyware but if I run it again, even immediately thereafter, it finds the same issue. I have done 2 full reinstalls of QB and keep having this problem. My Norton does NOT find this spyware, nor does Malwarebytes.

 

I don't know if this is a real infection or if something in quickbooks makes IObit think I have been infected. Right now I’m afraid to do anything that involves a password in case I’m being logged.

 

Thanks!

 

Scan file is below:

 

IObit Security 360

 

OS:Windows XP

Version:1.5.0.13

Define Version:2404

Time Elapsed:00:17:58

Objects Scanned:37622

Threats Found:2

 

|Name|Type|Description|ID|

Spyware.Password, File, C:\Program Files\Common Files\Intuit\QuickBooks\stlport_r50.dll, 12-574

Spyware.Password, File, C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\stlport_r50.dll, 12-574

[enoskype]

Hi jeffc,

 

Please follow the procedure in Guidelines and Requirements for Reporting a False Positive. thread.

 

- Upload the file to VirusTotal and give the link to the analysis here in this thread.

 

- Upload the file to Wikisend and give the download link here in this thread.

 

Cheers.

[jeffc]

Added requested links and attachment

 

The file in question is in the attached zip.

 

The VirusTotal report link is:

http://www.virustotal.com/file-scan/report.html?id=fead2f18b1c584ce67ed06113bf30aa0eba24a11e9549f9cf5c0c316ba81b660-1295473194

 

The wikisend download link is:

http://wikisend.com/download/549982/stlport_r50.dll

 

Sorry for not following procedure...I'm a newbie.

 

Thanks!

possible infection.zip

[hxin]

The file in question is in the attached zip.

 

The VirusTotal report link is:

http://www.virustotal.com/file-scan/report.html?id=fead2f18b1c584ce67ed06113bf30aa0eba24a11e9549f9cf5c0c316ba81b660-1295473194

 

The wikisend download link is:

http://wikisend.com/download/549982/stlport_r50.dll

 

Sorry for not following procedure...I'm a newbie.

 

Thanks!

 

Hi jeffc

 

Thanks for your feedback.

This's a FP.We will solve this issue in our later update definition 2406.

[jeffc]

Thanks!

 

Thanks for your help. Knowing I am not infected is a big relief.