Trojan in opennurbs_fme.dll?

[Anonymous]

F-Secure antivirus detects Trojan.Generic.17476271 in

  C:\Program Files\Common Files\Autodesk Shared\GIS\ImportExport\11.0\opennurbs_fme.dll

as well as in installation media -

  C:\Autodesk\Autodesk_Map_2017_English_Win_64bit_DLM\x64\AcadMap\Common Files\Autodesk Shared\GIS\ImpExp\11.0\opennurbs_fme.dll

and moves the file to quarantine.

Is this file valid or it is prone to infection?

[Alfred.NESWADBA]

Hi,

you can upload your dll to that site >>>click<<< and it will be checked against a lot of different antivirus software.

- alfred -

[Anonymous]

I uploaded opennurbs_fme.dll to Virustotal and the detection ratio is 8/51:

https://virustotal.com/en/file/6b90146f0da745c5431486251a052d0a9d0a193137223605b1d8aa8204b5fe3f/anal...

   ALYac Trojan.Generic.17476271 20160706

   Ad-Aware Trojan.Generic.17476271 20160706

   BitDefender Trojan.Generic.17476271 20160706

   Emsisoft Trojan.Generic.17476271 (B) 20160706

   F-Secure Trojan.Generic.17476271 20160706

   GData Trojan.Generic.17476271 20160706

   eScan Trojan.Generic.17476271 20160706

   nProtect Trojan.Generic.17476271 20160706

Do we consider it Trojan?

[Alfred.NESWADBA · Accepted solution]

Hi,

wow, I uploaded my file onto the same viruscheck site and get the same report (9 of 51 systems recognized that file to contain a virus).

As the majority part (42 tests) are negative I would say no, it's not a virus, but Autodesk should contact these 9 software vendors to clarify the situration (it's hard if some automatism removes program files).

Create a support request in your subscription center and hopefully this will be corrected in the near future.

- alfred -