Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Get Qt Extensions
  • Unsolved
Collapse
Brand Logo
  1. Home
  2. Qt Development
  3. General and Desktop
  4. Qt5Core.dll is detected as key-logger by antivirus
Forum Updated to NodeBB v4.3 + New Features

Qt5Core.dll is detected as key-logger by antivirus

Scheduled Pinned Locked Moved Unsolved General and Desktop
3 Posts 2 Posters 2.2k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • MandarM Offline
    MandarM Offline
    Mandar
    wrote on last edited by Mandar
    #1

    I have a Qt application installed on several machine. Some of this machine have Quick-heal antivirus and some of them have McAfee antivirus.
    couple of machine with quick-heal antivirus reported as Qt5Core.dll as keylogger when uninstalling application.

    keylogger detected

    antivirus version

    Dll version

    AccessMask : 1507775
    Archive : TRUE
    Compressed : FALSE
    CreationClassName : CIM_LogicalFile
    CreationDate : 20170518134937.795701
    CSCreationClassName : +330
    CSName : Win32_ComputerSystem
    Encrypted : DESKTOP - MTJIRFE
    EncryptionMethod : FALSE
    Extension : dll
    FileName : qt5core
    FileSize : 5364224
    FileType : Application Extension
    FSCreationClassName : Win32_FileSystem
    FSName : NTFS
    Hidden : FALSE
    Manufacturer : The Qt Company Ltd
    Readable : TRUE
    Status : OK
    System : FALSE
    Version : 5.6.1.0
    Writeable : TRUE

    jsulmJ 1 Reply Last reply
    0
    • MandarM Mandar

      I have a Qt application installed on several machine. Some of this machine have Quick-heal antivirus and some of them have McAfee antivirus.
      couple of machine with quick-heal antivirus reported as Qt5Core.dll as keylogger when uninstalling application.

      keylogger detected

      antivirus version

      Dll version

      AccessMask : 1507775
      Archive : TRUE
      Compressed : FALSE
      CreationClassName : CIM_LogicalFile
      CreationDate : 20170518134937.795701
      CSCreationClassName : +330
      CSName : Win32_ComputerSystem
      Encrypted : DESKTOP - MTJIRFE
      EncryptionMethod : FALSE
      Extension : dll
      FileName : qt5core
      FileSize : 5364224
      FileType : Application Extension
      FSCreationClassName : Win32_FileSystem
      FSName : NTFS
      Hidden : FALSE
      Manufacturer : The Qt Company Ltd
      Readable : TRUE
      Status : OK
      System : FALSE
      Version : 5.6.1.0
      Writeable : TRUE

      jsulmJ Offline
      jsulmJ Offline
      jsulm
      Lifetime Qt Champion
      wrote on last edited by
      #2

      @Mandar I guess a false positive.
      From where did you get Qt? If from official web-site then it is a false positive.
      You can upload the DLL to https://www.virustotal.com to be sure.

      https://forum.qt.io/topic/113070/qt-code-of-conduct

      MandarM 1 Reply Last reply
      2
      • jsulmJ jsulm

        @Mandar I guess a false positive.
        From where did you get Qt? If from official web-site then it is a false positive.
        You can upload the DLL to https://www.virustotal.com to be sure.

        MandarM Offline
        MandarM Offline
        Mandar
        wrote on last edited by
        #3

        @jsulm as per virustotal.com it seems ok

        As per https://www.virustotal.com
        SHA256: 6060c817a8b7d95624520562b27b48573c7ec00fe0f75a706edcdc0b01558b1d
        File name: Qt5Core.dll
        Detection ratio: 0 / 55
        Analysis date: 2017-01-20 06:16:03 UTC ( 3 months, 4 weeks ago )

        1 Reply Last reply
        0

        • Login

        • Login or register to search.
        • First post
          Last post
        0
        • Categories
        • Recent
        • Tags
        • Popular
        • Users
        • Groups
        • Search
        • Get Qt Extensions
        • Unsolved