AutoCAD 2013 trojan on library

[firmo.filipe]

hi

i'm using autoCAD 2013 for Mac student version. It was working fine untill today when my antivirus, kaspersky security, detected a trojan on /Applications/Autodesk/AutoCAD2013/AutoCAD 2013.app/contents/Library/libgelib.dylib . 

The trojan name is Trojan-PSW.Win32.LdPinch.ex.

 Antivirus moved it to quarenteen and now i can't run auto cad. What is that file on libraries? is that normal? is it an infected file or not?

i already had re-install auto cad and i continue to have the same problem. should i  ignore it and restore the file?

please help. 

Filipe

[firmo.filipe]

 its a "false positive" and there is no reason to worry about. i have just removed it from quarenteen and ignore it and autocad is working fine again. thanks

[maxim_k]

Welcome to the Autodesk Forums!

Hi Filipe,

I justchecked this file (from my installation of AutoCAD) here:

http://vms.drweb.com/online/?lng=en

and got this result:

So it is absolutely safe to use AutoCAD for Mac with this dynamic library.

Maxim

Maxim

[firmo.filipe]

thanks for the reply, autoCAD is running ok now! 

[wei503]

I insatlled a Kaspersky Security app and do a virus check with AutoCAD 2013. It shows no threats detected. My Kaspersky version is 13.0.2.458. It seems an update available, but will never completed..

I will send this false alert to Kaspersky.

Thanks,
Wei

[wei503]

Hi Filipe,

Could you please attach the libgelib.dylib? I just would like to have a check of the file on your machine.

Thanks,
Wei

[firmo.filipe]

uploaded

[firmo.filipe]

this is how i solved the problem:
according to my anti-virus, kaspersky security 13.0.2.458, there were other files inside autocad2013.app that were acused to be threaths:

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/AcPublish.bundle/Contents/MacOS/AcPublish

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/AcTable.bundle/Contents/MacOS/AcTable

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/AppLoad.bundle/Contents/MacOS/AppLoad

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/BmHelper.crx/Versions/A/BmHelper

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/Contents/Library/libgelib.dylib

/Applications/Autodesk/AutoCAD 2013/AutoCAD 2013.app/Contents/Library/pmutil11.dylib

i went to preferences and put on the safe zone those files and then removed the same files from quarentine.
Autocad is working normally now. 

However, isn't it weird the educatinal version give all of this problems? or the problem is in anti-virus?

[maxim_k]

Hi,

Just checked file you posted here with KIS 14.0.0.177 (with updated virus definitions) and did not get any alert.

Maxim

[wei503]

I downloaded the file and also cannot find threats in it..

I installed the student version of AutoCAD 2013 for Mac, and still cannot find threats.. I cannot tell exactly what the problem is, but maybe you can send the report to Kaspersky see if they have comments.

Thanks,
Wei

[firmo.filipe]

I will do that, if i got any answer from kaspersky i will post here