# Virus Warning on Webroot

**URL:** https://community.mp3tag.de/t/virus-warning-on-webroot/66915
**Category:** Support
**Created:** [December 21, 2024, 1:57pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915 "2024-12-21T13:57:21Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Buntobox](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/b/e480ec/32.png) [@Buntobox](https://community.mp3tag.de/u/Buntobox)
#### Post date: [December 21, 2024, 1:57pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/1 "2024-12-21T13:57:21Z")

</div>

I have just had my Webroot antivirus report a virus in the Mp3Tag program folder, C:\Program Files/Mp3Tag.  
It was reported as being a w32.Trojan.Gen called tak\_deco\_lib.dll

Is this a real threat or a false positive?

---

<div class="post-metadata">

### Author: ![LyricsLover](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/l/c6cbf5/32.png) [@LyricsLover](https://community.mp3tag.de/u/LyricsLover)
#### Post date: [December 21, 2024, 2:06pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/2 "2024-12-21T14:06:57Z")

</div>

You can check it by your self if you upload this  
`tak_deco_lib.dll`  
to [virustotal.com](http://virustotal.com) and see what all other antivirus software detect.

I guess it's just another false positive.

This is was virustotal says about the last `tak_deco_lib.dll` from 26.07.2024:

> **[VirusTotal](https://www.virustotal.com/gui/file/345bd0d94aee5967b9b6c21cb1ee2a3c3946778fd84e0495b5fccbb084b78936)**
>
> VirusTotal

1 of 62 vendors believe this is a "Trojan.Malware".  
I think you can ignore this one false positive from vendor "MaxSecure".

---

<div class="post-metadata">

### Author: ![ohrenkino](https://community.mp3tag.de/user_avatar/community.mp3tag.de/ohrenkino/32/4843_2.png) [@ohrenkino](https://community.mp3tag.de/u/ohrenkino)
#### Post date: [December 21, 2024, 2:07pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/3 "2024-12-21T14:07:35Z")

</div>

See e.g here:

> [@False Positive: Malwarebytes and Virustotal Report AI Malware in 3.26](https://community.mp3tag.de/t/false-positive-malwarebytes-and-virustotal-report-ai-malware-in-3-26/64907):
>
> Malwarebytes and virustotal had discovered AI malware in 3.26. I tried it afterwrds with 3.25 and no malware discovered. Using Malwarebytes Pro 5.1.5.116

(and which MP3tag version should be virus infested?)

---

<div class="post-metadata">

### Author: ![LyricsLover](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/l/c6cbf5/32.png) [@LyricsLover](https://community.mp3tag.de/u/LyricsLover)
#### Post date: [December 21, 2024, 2:09pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/4 "2024-12-21T14:09:20Z")

</div>

Since Mp3tag version v3.27 this external DLL is no more necessary.

From the [changelog](https://www.mp3tag.de/en/changelog.html):

```auto
[2024-08-08] REL: VERSION 3.27 (for Windows 11/10/8.1/8/7)
------------ -------------------------------------------------------------------------------------
[2024-07-30] CHG: reimplemented parsing of TAK files and removed dependency to `tak_deco_lib.dll`.

```

@Buntobox Maybe you should update your Mp3tag version?

---

<div class="post-metadata">

### Author: ![Buntobox](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/b/e480ec/32.png) [@Buntobox](https://community.mp3tag.de/u/Buntobox)
#### Post date: [December 21, 2024, 3:09pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/5 "2024-12-21T15:09:06Z")

</div>

Thanks for the help. I have now updated to the latest version. I have used Mp3Tag for a while so got no notification of a new version.

---

<div class="post-metadata">

### Author: ![MP3Freak\_Peter](https://community.mp3tag.de/letter_avatar_proxy/v4/letter/m/c68b51/32.png) [@MP3Freak\_Peter](https://community.mp3tag.de/u/MP3Freak_Peter)
#### Post date: [December 21, 2024, 8:45pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/6 "2024-12-21T20:45:34Z")

</div>

Anyway, some additional information to virustotal:  
"1/62 security vendor flagged this file as malicious", specially if an scanner like "MaxSecure" some unknown reports "malicious" '  
=\> never mind! wave and smile!

---

<div class="post-metadata">

### Author: ![system](https://community.mp3tag.de/uploads/default/original/2X/c/ce7035d426cb755a7916793326d23b465222a407.png) [@system](https://community.mp3tag.de/u/system)
#### Post date: [January 20, 2025, 8:45pm UTC](https://community.mp3tag.de/t/virus-warning-on-webroot/66915/7 "2025-01-20T20:45:35Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
