File wmaengine dll reported has a trojan virus(false detection)

[banzailoco]

Kaspersky deleted the file in C:\Program Files\Acoustica Mixcraft 7\wmaengine.dll. Is reporting it has a Trojan-Dropper.win.32.Sysn.bfra. Do I need it?

[Juno]

See this thread:

http://forums.acoustica.com/bbs/viewtop ... =4&t=18758

So, yes, you need it. First update your AV definitions and then re-install Mixcraft. That should do it.

[fredfish]

Juno is bang on - if even after you update your definitions it still tries to delete the file you probably need to add an exception. I dont use Kaspersky but a quick search found this page about adding exceptions.

http://support.kaspersky.com/8742

You might also want to report it to Kaspersky as a false positive so they can include it in future updates.

Cheers

John

[aquataur]

just had K. scrutinize that file - nothing.

Is it possible that such a file gets infected by some virus through some nefarious process?

My subscribtion to K gets renewed automatically after a year. It thus came about that I had an old AV program kernel with up to date virus definitions, but this was causing troubles.

I found that I can always download and install the latest AV program (of the same functional type) and it will automatically work with the license I have.

Maybe you should update the program itself too if the same thing applies to you.

-helmut

[banzailoco]

It's reporting it has a Trojan when installing or when updating. I did a false positive report to Kaspersky about the file.
What is the function of this file?

Thx for the replies

[Acoustica Greg]

It's reporting it has a Trojan when installing or when updating. I did a false positive report to Kaspersky about the file.
What is the function on this file?

Thx for the replies

Hi,

That file is involved with Windows media support. You do need it to run Mixcraft properly. Did you ever try updating Kaspersky and/or your virus definitions?

Greg

[banzailoco]

Virus definitions are up to date.
This is the message I got from Kaspersky Lab:

"We were unable to reproduce the detection.
Please update your antivirus bases.
If the problem persists, please send the screenshots or logs of detection."

When I scan the file for viruses, no problem, it's during installation or when updating that the red flag goes up. I'm gonna reinstall Mixcraft to reproduce the warning.

[Acoustica Greg]

Hi,

Thank you for reporting the false positive to Kaspersky! At this point, you should probably just set the Kaspersky software to ignore it.

Greg

[banzailoco]

This is the images I send to Kaspersky lab.

mixcraftalert2.jpg (109.11 KiB) Viewed 5307 times

mixcraftalert.jpg (108.63 KiB) Viewed 5307 times

[banzailoco]

Greg, Yeap, that is the only way.

[Acoustica Greg]

Hi,

For a false positive report, they'd probably want the actual wmaengine.dll file so they could assure themselves it really is a false positive.

Greg

[banzailoco]

This is front the email I got from Kaspersky Lab about the file.

"Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

Best regards,
Alexey Vishnyakov | Junior Malware Analyst | Kaspersky Lab"

[Acoustica Greg]

This is front the email I got from Kaspersky Lab about the file.

"Hello,

Sorry, it was a false detection. It will be fixed in the next update.
Thank you for your help.

Best regards,
Alexey Vishnyakov | Junior Malware Analyst | Kaspersky Lab"

Hi,

Wow, that's great. Thanks again for reporting it to them!

Greg

[Peeb]

Norton just deleted this file on me, too:

"Filename: wmaengine.dll
Threat name: Trojan.GenFull Path: c:\program files (x86)\acoustica mixcraft 7\wmaengine.dll
____________________________

____________________________

On computers as of 
10/7/2015 at 5:41:00 AM

Last Used 
10/29/2015 at 6:03:09 AM

Startup Item 
No

Launched 
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.

___________________________

wmaengine.dll Threat name: Trojan.Gen
Locate

Few Users
Fewer than 50 users in the Norton Community have used this file.

New
This file was released 22 days ago.

High
This file risk is high.
____________________________

Source: External Media

Source File:
wmaengine.dll
__________________________

File Actions

File: c:\program files (x86)\acoustica mixcraft 7\ wmaengine.dll Removed
____________________________

File Thumbprint - SHA:
aa2f262c745f59f8ea1b663221b78a68b115a2cfa437bee42e36b09d7dfb9e5b
File Thumbprint - MD5:
Not available"

Will this require me to re-install mixcraft?

[Peeb]

Just contacted Norton- they say they are getting reports of trouble with this file.

Who's right?