itdownload.dll in install reported as malicious
 
Notifications
Clear all

itdownload.dll in install reported as malicious  

  RSS
Hank
 Hank
(@hank-3)
Active Member
itdownload.dll in install reported as malicious

Anyone else run into this when trying to install the full slicer package? I checked the file in both VirusTotal and Hybrid-Analysis and both state it is malicious.

Posted : 09/09/2020 1:00 pm
jsw
 jsw
(@jsw)
Famed Member
RE: itdownload.dll in install reported as malicious

I would upload the exact file that triggered the warning to virustotal.com, which will bounce it against most of the usual virus scanners, and see if it's indeed infected or most likely a false positive.

Oops, should have read more closely.  How many of the scanners at Virustotal said it was suspicious?

Posted : 09/09/2020 2:40 pm
Hank
 Hank
(@hank-3)
Active Member
Topic starter answered:
RE: itdownload.dll in install reported as malicious

Four at the time and again Hybrid- Analysis also flagged it as malicious

Posted : 09/09/2020 3:18 pm
bobstro
(@bobstro)
Illustrious Member
RE: itdownload.dll in install reported as malicious

I'm not running PrusaSlicer on Windows. Has anybody verified that this file is part of the normal install?

My notes and disclaimers on 3D printing

and miscellaneous other tech projects
He is intelligent, but not experienced. His pattern indicates two dimensional thinking. -- Spock in Star Trek: The Wrath of Khan

Posted : 09/09/2020 6:20 pm
Fred
 Fred
(@fred-6)
Active Member
RE: itdownload.dll in install reported as malicious

I just tried to install PrusaSclicer (2.2.9.1) on Windows and got the same result. Therefore the "itdownload.dll" should be a part of the normal install. McAfee is also detecting the file as a trojan..  seems like a false positive..

Posted : 06/10/2020 3:48 pm
3Delight
(@3delight)
Moderator Moderator
RE: itdownload.dll in install reported as malicious

Where are you all downloading PrusaSlicer from?

Posted : 06/10/2020 4:02 pm
Fred
 Fred
(@fred-6)
Active Member
RE: itdownload.dll in install reported as malicious
Posted by: @3delight

Where are you all downloading PrusaSlicer from?

It seems not to work with the executable listed here: https://www.prusa3d.com/prusaslicer/
I just tried the files from github ( https://github.com/prusa3d/PrusaSlicer/releases/tag/version_2.2.0 ) an it works perfectly.
Also there is a big difference sizewise (362mb for the executable and 84mb for the ready to go zip file).. maybe someone has an explanation?

This post was modified 4 years ago by Fred
Posted : 06/10/2020 4:15 pm
--
 --
(@)
Illustrious Member
RE: itdownload.dll in install reported as malicious

That file does not exist on my system ... PrusaSlicer 2.2.0 downloaded from Prusa ...

Pretty sure I installed from 2.2.9.1, but may have been 2.3.0.0 ... aka prusa3D_win_2_3_0.exe -- both files pass Windows Defender.

This post was modified 4 years ago 2 times by --
Posted : 06/10/2020 4:27 pm
3Delight
(@3delight)
Moderator Moderator
RE: itdownload.dll in install reported as malicious

I don't have that file, but will escalate this thread up the chain...

Have all of you with this issue ran a virus scan to see if there are other problems?

Posted : 06/10/2020 4:35 pm
--
 --
(@)
Illustrious Member
RE: itdownload.dll in install reported as malicious

My download has this signature: SHA1 0eb1b7e9ac15637638310cc5288e8fee

Posted : 06/10/2020 4:37 pm
--
 --
(@)
Illustrious Member
RE: itdownload.dll in install reported as malicious

The 360MB installer has drivers, samples, lots of fluff. The 65MB zip is a simple executable only set ... 

Posted : 06/10/2020 4:40 pm
3Delight
(@3delight)
Moderator Moderator
RE: itdownload.dll in install reported as malicious

@fredeof

The Prusa3d.com file is a complete package contains a setup that installs all the required software and drivers, whereas the github one is just the bare bones PrusaSlicer... hence the size difference.

Posted : 06/10/2020 4:41 pm
Fred
 Fred
(@fred-6)
Active Member
RE: itdownload.dll in install reported as malicious

@tim-m30, 3delight - thanks for the explanation.
my file got the same hash as yours.. so probably McAfee is just freaking out for nothing, like always.

 hope jimhank got it figured out as well

Posted : 06/10/2020 5:10 pm
richard.l
(@richard-l)
Member Moderator
RE: itdownload.dll in install reported as malicious

Tested my downloads of prusa3d_win_2_2_9_1.exe  from 9/4/2020 and one from today 10/6/2020. Both have the same CRC32/CRC64/MD5/RIPEMD160/SHA1/SHA256/SHA3_256 hashes and pass all AV tests.

 

Posted : 06/10/2020 6:14 pm
Share: