Possible trojan files in DS 11??

from Stardock Forums

Hey, yeah I was scanning my computer today for malware as I routinely do & it picked up these files "lights32.dll" & "lights64.dll" & marked them as "Gen:Variant.Graftor.946001" & quarantined the files. I don't know what that means, but I double checked on Virus Total & it flagged those files as malicious from 13 vendors. Are these files safe or do they have some sort of malware in them?? I noticed that the dream "Coloured Lights" cannot run without these files. They seem to be just video codec files, but I'm a little concerned about these files coming up as malicious. I use IObit Malware Fighter Pro & have it up to date. I reported it as false positive, but they said they found it on Virus Total & to remove the file(s) in question. I got them quarantined now, as I'm not sure if I should white list those files or not. I don't know if this is the right place to ask such a question, but I figured it may be a good idea. Thanks in advance... :)

Here's a link to what's on Virus Total if anyone wants to check it out: https://www.virustotal.com/gui/file/34e5af855eb68b9cde6c23620c50ca85df7459bbe159296ba72e7d4de80e45eb

Thanks... :)

 

deskscapes
37,896 views 11 replies
Reply #1 from WinCustomize Forums Top


Are these files safe or do they have some sort of malware in them??
They are safe as long as you got the app directly from Stardock/WinCustomize.   From Steam or anywhere else, who knows.

 

+1 Loading…
Reply #2 from Stardock Forums Top

Yup, I got it directly from Stardock. I always scan what I download, so should be okay. I also so happened to come across this thread while I was searching: https://forums.stardock.com/506902/bitdefender-is-reporting-coloured-lights-with-a-virus-after-i-just-installe Seems like it should be added to the white list. I did contact IObit though, but all they told me was that it's on Virus Total & I should remove it. Should I tell them anything or just white list the files & forget about it?? Thanks a bunch... :grin:  

Star Control: Origins
Reply #3 from Stardock Forums Top

Hello,
I believe it should be safe if you get those files directly from Stardock, Anyway, I have forward your report/question to Stardock Support Team for their assistance. Please keep an eye on this thread for any updates. We appreciate your feedback and patience.

Thanks

Basj,
Stardock Community Assistant

+1 Loading…
Reply #4 from Stardock Forums Top

Never mind... I just added the file(s) to the white list. Funny IObit won't add it to their safe list, but that's up to them I guess. Thanks for the help & all... :congrat:  :grin:  

Reply #5 from Stardock Forums Top

Quoting basj, reply 3

Hello,
I believe it should be safe if you get those files directly from Stardock, Anyway, I have forward your report/question to Stardock Support Team for their assistance. Please keep an eye on this thread for any updates. We appreciate your feedback and patience.

Thanks

Basj,
Stardock Community Assistant

 

Yeah, I think they should be aware of things like this. Thanks...  :congrat:  :grin:  

+1 Loading…
Reply #6 from WinCustomize Forums Top

Quoting geeky1977, reply 4

Never mind... I just added the file(s) to the white list. Funny they won't add it to their safe list, but that's up to them I guess. Thanks for the help & all... :congrat:  :grin:  

Some AV companies are less professional than others and do not much care that they end up giving false-positives, even when it adversely impacts on the company whose files are wrongly flagged.  Their indifference to correct it simply reflects badly on them.

When there are too many 'errors' it's time to seek a better AV program...;)

 

+1 Loading…
Reply #7 from Stardock Forums Top

Worth noting an AV package that 'protects you' from non existent threats looks like it is doing more than one which doesn't falsely detect things.  Not always bad from a certain perspective when it comes to renewal time...

+1 Loading…
Reply #8 from WinCustomize Forums Top

Microsoft's built in anti virus works well for me.  I don't use anything else and I hardly ever have issues.  Every now and then a gadget gets flagged, but I know who makes them and that they are virus free.

 

 

+2 Loading…
Reply #9 from Stardock Forums Top

I did get it from Stardock. I just added the file(s) to my whitelist. Thanks... :hot:  

Reply #10 from Stardock Forums Top

Yeah, that flagged something else as malicious too. I think it was a language file for Media Player Classic (64-bit). I sent IObit a false positive report on the file in question & they agreed to add that file to a future database update so it won't be detected anymore. I think maybe they're paranoid or something about that "lights32.dll" file for some reason because it shows up on Virus Total. :omg: I humored myself though & recontacted them about that file anyhow... I can't wait to see what they'll say to that. :rolleyes: B) Still it's a little weird that only "lights32.dll" gets flagged on Virus Total (by 13 vendors) & the "lights64.dll" file doesn't get 1 red mark at all... :O :grin: Guess it's like someone mentioned in this post, some anti-malware companies just aren't as professional as others. I mainly stick to IObit because I can't afford anything else with my tight budget... if I could though, I'd get Malwarebytes & forget it. IObit is decent enough for my needs considering what I pay annually. I'm not saying it's the best, but I've seen worse stuff, at least for my (aging) system I did. Anyhow, thanks for the help & all everyone. I really appreciate it... :congrat: And on that note, I think we can put this thread to rest now... B)

Reply #11 from Stardock Forums Top

Yeah, Windows Defender is okay, but sometimes that can be a pain in the butt, at least for me it can. Thanks for the reply... :congrat:  :hot: