[solved] Windows Defender killed DirectShow dll (1 Viewer)

[morpheus_xx]

I don't think that we have changed the file since we released Spring 16.

Any comments?

The files probably hasn't been changed since multiple years. This is definately a false positive, a very annoying though.

 

[Eaglehawk]

Perhaps you should contact at least Microsoft and ask them why they black-balled it? I remember when Sophos banned a core mirc dll and brought down our entire messaging infrastructure.

 

[HTPCSourcer]

Perhaps you should contact at least Microsoft and ask them why they black-balled it?

Well, it's not that they have given their friends from MediaPortal a phone number to call when we would like to chat .

I have uploaded the DLL to their malware protection unit and reported it as false positive. Note that we act as private users, hence we will just stand in line.

It could be helpful if every user of MP2 made a similar report here (Microsoft account is required): https://www.microsoft.com/en-us/security/portal/submission/submit.aspx

 

[Eaglehawk]

Done.

 

[Eaglehawk]

You're welcome...

Analysis of the file(s) in Submission ID <blah> is now complete.

This is the final email that you will receive regarding this submission.

The Microsoft Malware Protection Center (MMPC) has investigated the following file(s) which we received on 6/6/2016 11:22:55 PM Pacific Time.
Below is the determination for your submission.

========
Submission ID <blah>

Submitted Files
==============================
===============
DirectShowWrapper.dll [Not Malware]


Analyst Comments
================
-- 06/08/2016 10:14:05 AM --
The submitted sample is Clean.
We will remove the detection on this sample.



Your submission was scanned using antimalware definition version 1.223.1020.0.

 

[HTPCSourcer]

Interesting!

I had received a similar message, although it just stated that they would look into the case. Maybe Aussies are preferred over us Fritz by Microsoft

 

[Eaglehawk]

The VirusTotal website is now only reporting 6 scanners marking it as malware. (5 if you remove the Microsoft entry)