# Malwarebytes false positive?

**URL:** https://community.mp3tag.de/t/malwarebytes-false-positive/65451
**Category:** Support
**Created:** [August 1, 2024, 9:02am UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451 "2024-08-01T09:02:54Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![spotchi](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/s/b2d939/32.png) [@spotchi](https://community.mp3tag.de/u/spotchi)
#### Post date: [August 1, 2024, 9:02am UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/1 "2024-08-01T09:02:54Z")

</div>

Despite it being a few weeks since I updated MP3tag, Malwarebytes decided during today's daily scan that it found a Trojan (Trojan.DLLHijack) in the location \Mp3tag\tak\_deco\_lib.dll. I don't see how this can be anything but a false positive, but I thought I should let you know just in case.

---

<div class="post-metadata">

### Author: ![General714](https://community.mp3tag.de/user_avatar/community.mp3tag.de/general714/32/13703_2.png) [@General714](https://community.mp3tag.de/u/General714)
#### Post date: [August 1, 2024, 10:03am UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/2 "2024-08-01T10:03:41Z")

</div>

Same here. Showing, "Trojan - DLL Hijack". Note that virustotal ([https://www.virustotal.com](https://www.virustotal.com)) shows zero detections for the DLL file (including, weirdly, Malwarebytes...).

---

<div class="post-metadata">

### Author: ![Chris2](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/c/ac8455/32.png) [@Chris2](https://community.mp3tag.de/u/Chris2)
#### Post date: [August 1, 2024, 10:04am UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/3 "2024-08-01T10:04:16Z")

</div>

Same issue here. MB also flags up mp3tagv326-x64-setup.exe

Edit: And older versions of 64-bit-Setup exes as well........320, 323, 325.

Edit 2: However, mp3tagv326setup.exe is not flagged

---

<div class="post-metadata">

### Author: ![Bluesky](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/b/e47c2d/32.png) [@Bluesky](https://community.mp3tag.de/u/Bluesky)
#### Post date: [August 1, 2024, 12:09pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/4 "2024-08-01T12:09:09Z")

</div>

I just got a Malwarebytes trojan alert about a file in your latest release:

Trojan.DLLHijack, C:\PROGRAM FILES\MP3TAG\TAK\_DECO\_LIB.DLL, Quarantined,

Your thoughts?

---

<div class="post-metadata">

### Author: ![ohrenkino](https://community.mp3tag.de/user_avatar/community.mp3tag.de/ohrenkino/32/4843_2.png) [@ohrenkino](https://community.mp3tag.de/u/ohrenkino)
#### Post date: [August 1, 2024, 12:23pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/5 "2024-08-01T12:23:40Z")

</div>

see also here:

> [@False Positive: Malwarebytes and Virustotal Report AI Malware in 3.26](https://community.mp3tag.de/t/false-positive-malwarebytes-and-virustotal-report-ai-malware-in-3-26/64907):
>
> Malwarebytes and virustotal had discovered AI malware in 3.26. I tried it afterwrds with 3.25 and no malware discovered. Using Malwarebytes Pro 5.1.5.116

---

<div class="post-metadata">

### Author: ![Bluesky](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/b/e47c2d/32.png) [@Bluesky](https://community.mp3tag.de/u/Bluesky)
#### Post date: [August 1, 2024, 12:49pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/6 "2024-08-01T12:49:12Z")

</div>

Thanks. I'll tell Malwarebytes to behave properly regarding this false positive.

---

<div class="post-metadata">

### Author: ![Chris2](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/c/ac8455/32.png) [@Chris2](https://community.mp3tag.de/u/Chris2)
#### Post date: [August 1, 2024, 2:48pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/7 "2024-08-01T14:48:42Z")

</div>

just read the other thread. good to know it was a false positive.

---

<div class="post-metadata">

### Author: ![Florian](https://community.mp3tag.de/user_avatar/community.mp3tag.de/florian/32/5759_2.png) [@Florian](https://community.mp3tag.de/u/Florian)
#### Post date: [August 1, 2024, 6:06pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/8 "2024-08-01T18:06:55Z")

</div>

It seems to be fixed on Malwarebytes side now. Thanks to all of you for the heads up!

Here is the latest Virustotal report for `mp3tagv326-x64-setup.exe`:

> **[VirusTotal](https://www.virustotal.com/gui/file/02a277625061d2999a9af143d84b8d76387cf5683d11baeb599bc4a5df0e615e?nocache=1)**
>
> VirusTotal

---

<div class="post-metadata">

### Author: ![system](https://community.mp3tag.de/uploads/default/original/2X/c/ce7035d426cb755a7916793326d23b465222a407.png) [@system](https://community.mp3tag.de/u/system)
#### Post date: [August 31, 2024, 6:07pm UTC](https://community.mp3tag.de/t/malwarebytes-false-positive/65451/9 "2024-08-31T18:07:43Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
