You are here

Malwarebytes' Anti-Malware says Notepad++ has a trojan!

17 posts / 0 new
Last post
truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
Malwarebytes' Anti-Malware says Notepad++ has a trojan!

Do I need to be concerned?

Malwarebytes' Anti-Malware says the file "SciLexer.dll" in the latest notepad++ has a trojan horse!

Anyone else get this?

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 2 years 6 months ago
Developer
Joined: 2006-05-26 12:08
it's a false positive,

it's a false positive, Notepad++ is based off of Scintilla which is the library that gives Notepad++ the highlighting abilities it has, SClexer is the library in dll format which in the source of notepad++ imports and using dll calls magically produce syntax highlighting. There is nothing to be concerned about. (I speak with experience in using the scintilla library myself, though personally I use it in static form where the functions are built into the end product and not dynamically like notepad++ uses)

your friendly neighbourhood moderator Zach Thibeau

truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
I removed the file and

I removed the file SciLexer.dll, and notepad++ still seems to work though.

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 2 years 6 months ago
Developer
Joined: 2006-05-26 12:08
then expect to loose some

then expect to loose some functionality, Notepad++ depends on SciLexer.dll for scintilla functions, especially advance code highlighting features.

You have been told multiple times about the definition of a false positive, SciLexer.dll being reported as a trojan is a false positive and Virus Total is saying there is no trojan in Scilexer.dll from my copy of Notepad++Portable

your friendly neighbourhood moderator Zach Thibeau

truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
I only use Notepad++ to open

I only use Notepad++ to open files, add/edit/save. And notepad++ works fine still even after deleting the file.

It may be a false positive or not, I cannot know for 100% certain, so better safe than sorry, especially notepad++ still does everything I want without the file.

Bahamut
Bahamut's picture
Offline
Last seen: 13 years 4 months ago
Joined: 2006-04-07 08:44
Nothing here will ever have a

Nothing here will ever have a virus. Send the file to the developers of Malwarebytes and have them analyze it. They will tell you it's harmless and likely thank you for helping them improve their program.

Vintage!

David Dixon II
David Dixon II's picture
Offline
Last seen: 3 years 2 months ago
Developer
Joined: 2007-06-11 22:54
Search

Please do a search for "false positive". We have recieved many notices about these. They're not a virus, trojan, or whatever let alone anything but a file to add functionality.

Also, please scroll down to the "AntiVirus and AntiSpyware False Positives" section of this page: https://portableapps.com/support

Na na na, come on!

John T. Haller
John T. Haller's picture
Online
Last seen: 48 min 25 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
You Already Know

truthseeker, you already know the answer to all those questions. You've been a member for 2 years. You've asked about false positives in the past, always been given the same answers and every single time, it's been a false positive and not a virus. But then, the very next time, you always ask "how do I really know?" and decide it's better to be safe then sorry and delete it. Since you already know the answers we will give, how you will respond and that it will ultimately be another false positive, we probably don't need to have this back and forth every time.

Sometimes, the impossible can become possible, if you're awesome!

David Dixon II
David Dixon II's picture
Offline
Last seen: 3 years 2 months ago
Developer
Joined: 2007-06-11 22:54
John is right.

If you are so worried about false positives then do not download what we provide to you in our spare time. This roundabout has been going on for a while. You know they're false so just ignore it.

"How do I really know?" You've been with PortableApps.com for 2+ years. You should know the community and how they do things. That's how you know your answer. If after 2+ years you don't know the answer.... I really don't know.

I once used PortableApps.com's applications at my local library and their antivirus almosted removed some files. But when I was at home with any other antivirus, its scans turned up nothing. It's a false positive. Being here this long you should know to test things before saying their a virus.

Na na na, come on!

truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
David Dixon, is that why you

David Dixon, is that why you accused a portableapps program of being infected a few months ago?

David Dixon II
David Dixon II's picture
Offline
Last seen: 3 years 2 months ago
Developer
Joined: 2007-06-11 22:54
100%

Stop trolling truthseeker. Going into page 3 on my track record (which leads to a YEAR ago) I see no indication of what you believe my old childish mind said. I am 100% for what PortableApps does.

I'm done messing with you to feed your strive for attention, so if you further wish to continue this, get on my IRC Network. In the mean time, reinstall your app.

Na na na, come on!

Darkbee
Darkbee's picture
Offline
Last seen: 4 years 11 months ago
Joined: 2008-04-14 09:41
"Please Do Not Feed The

"Please Do Not Feed The Animals"

truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
I just installed the latest

I just installed the latest notepad++, version 5.8.4 and Malwarebytes does not report any trojan.

Ed_P
Offline
Last seen: 6 years 6 months ago
Joined: 2007-02-19 09:09
What a surprise

Apparently someone notified Malwarebytes of their error and they corrected it.

Ed

truthseeker
truthseeker's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-07-30 20:32
Yes I notified them and asked

Yes I notified them and asked them to check notepad++.

solanus
solanus's picture
Offline
Last seen: 10 years 6 months ago
Joined: 2006-01-21 19:12
Glad to see it

Hopefully this will also clear up your question mark issue!

I made this half-pony, half-monkey monster to please you.

PortableDave
Offline
Last seen: 11 years 5 months ago
Joined: 2010-12-03 07:02
IMHO MBAM has always suffered

IMHO MBAM has always suffered from too many false-positives. I don't use it now, if I had removed everything it claimed was malware my laptop would be a paperweight now.

Log in or register to post comments