Possible virus in LR4 rc1 beta

  • 1
  • Problem
  • Updated 6 years ago
LR4 rc1 beta: Norton found suspected virus in 2 files.
Full Path: c:\program files\adobe\adobe photoshop lightroom 4\support\dynamiclinkmediaserver\dynamiclinkmediaserver\1.0\memory.dll
Threat: Suspicious.Cloud.7.F
____________________________
____________________________
On computers as of Not Available
Last Used 3/29/2012 at 6:07:01 PM
Startup Item No
Launched No
____________________________
____________________________
Unknown
Number of users in the Norton Community that have used this file: Unknown
____________________________
Unknown
This file release is currently not known.
____________________________
High
This file risk is high.
____________________________
Threat Details
Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.
____________________________

____________________________
File Actions
File: c:\program files\adobe\adobe photoshop lightroom 4\support\dynamiclinkmediaserver\dynamiclinkmediaserver\1.0\memory.dll
Removed
File: c:\program files\adobe\adobe photoshop lightroom 4\support\dynamiclinkmediaserver\dynamiclinkmediaserver\1.0\qtparser.dll
Removed
____________________________
File Thumbprint - SHA:
9041fa8aa30c1009e8825ee4b518ffba54078dfd4e33d1780c46bcfc72b07327
____________________________
File Thumbprint - MD5:
bd185585d26acad02edbc635674a4884
____________________________
Photo of Harris Graeber

Harris Graeber

  • 2 Posts
  • 0 Reply Likes

Posted 6 years ago

  • 1
Photo of jdv

jdv, Champion

  • 728 Posts
  • 56 Reply Likes
"Threat type: Heuristic Virus. Detection of a threat based on malware heuristics."

This means they are guessing. This is nearly sure to be a false positive, and some bit-pattern in the DLL is triggering the heuristic. Do a web search. This one comes up a lot.
Photo of Becky Sowada

Becky Sowada, Adobe Employee

  • 508 Posts
  • 105 Reply Likes
memory.dll and qtparser.dll are files that Lightroom uses for video. They have been communicated to Norton as a safe file, but I'm not sure if Norton has updated their definitions yet. In the meantime, just accept those files as safe.
Photo of Harris Graeber

Harris Graeber

  • 2 Posts
  • 0 Reply Likes
Thanks Becky!