New version 4.9.3 with trojan horse?

All your suggestions, requests and ideas for future development
Post Reply
jasper1971
Posts: 3
Joined: 08 Mar 2021, 15:26

New version 4.9.3 with trojan horse?

Post by jasper1971 »

Just downloaded the latest version from your site, when i came to open it i was presented with a warning?

filebot.exe was detected as a trojan virus
trojan.generickd.40841059

Prior to this I tried clicking on the

filebot icon (nothing happened only trojan horse message)
filebot console icon (shows very briefly the command prompt)
filebot platform icon (nothing happened)

I have used this application (Paid version) for years and only now do I have an issue.

Can you help
User avatar
rednoah
The Source
Posts: 22899
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: New version 4.9.3 with trojan horse?

Post by rednoah »

Most likely a false positive. A bit of a strange one though, since the *.exe files are just launchers, and the exact same *.exe files have been shipped with every FileBot release for years.


:idea: You can check the SHA-2 to see if your filebot.exe has been modified.


Here's the expected SHA-2 hashes:

Code: Select all

x64/filebot.exe	16cf5b91d2e12dcccef94d28dad045a1c41baef92e5b915642f6560aa294b77f
x64/filebot.launcher.exe	7d493fb5fcfee901bb8edee6a64982da54f41f07fa4abb50eab5791d013112f2
:idea: Please read the FAQ and How to Request Help.
jasper1971
Posts: 3
Joined: 08 Mar 2021, 15:26

Re: New version 4.9.3 with trojan horse?

Post by jasper1971 »

Sorry, I am not that technical I was not able to do what you asked me.

I just uninstalled the application and then deleted every trace and every file from Filebot from my PC, cleaned it and reinstalled it again.

Works fine now
jasper1971
Posts: 3
Joined: 08 Mar 2021, 15:26

Re: New version 4.9.3 with trojan horse?

Post by jasper1971 »

I was wondering if you tell me how to fix this certification issue, reason being every time I run Restoro it still detects it filebot as a trojen?
kim
Power User
Posts: 1251
Joined: 15 May 2014, 16:17

Re: New version 4.9.3 with trojan horse?

Post by kim »

e.g.

Code: Select all

https://get.filebot.net/filebot/BETA/FileBot_4.9.3-portable.zip
https://www.virustotal.com/gui/url/f3cc ... /detection

= 0 / 85 = No virus

what file are you using ?
maybe you can try another
User avatar
rednoah
The Source
Posts: 22899
Joined: 16 Nov 2011, 08:59
Location: Taipei
Contact:

Re: New version 4.9.3 with trojan horse?

Post by rednoah »

jasper1971 wrote: 11 Mar 2021, 18:55 I was wondering if you tell me how to fix this certification issue, reason being every time I run Restoro it still detects it filebot as a trojen?
You may need to contact the support team of your particular anti-virus software so that they can add this particular file as an example for a false positive for their learning algorithms.
:idea: Please read the FAQ and How to Request Help.
howdymilsap
Posts: 35
Joined: 14 Jul 2018, 17:22

Re: New version 4.9.3 with trojan horse?

Post by howdymilsap »

The problem is Restoro - this is known as "potentially unwanted program" or PUP. see https://blog.malwarebytes.com/detection ... l-restoro/

get rid of restoro asap.
Post Reply