Page 1 of 1

New version 4.9.3 with trojan horse?

Posted: 08 Mar 2021, 17:20
by jasper1971
Just downloaded the latest version from your site, when i came to open it i was presented with a warning?

filebot.exe was detected as a trojan virus
trojan.generickd.40841059

Prior to this I tried clicking on the

filebot icon (nothing happened only trojan horse message)
filebot console icon (shows very briefly the command prompt)
filebot platform icon (nothing happened)

I have used this application (Paid version) for years and only now do I have an issue.

Can you help

Re: New version 4.9.3 with trojan horse?

Posted: 09 Mar 2021, 05:53
by rednoah
Most likely a false positive. A bit of a strange one though, since the *.exe files are just launchers, and the exact same *.exe files have been shipped with every FileBot release for years.


:idea: You can check the SHA-2 to see if your filebot.exe has been modified.


Here's the expected SHA-2 hashes:

Code: Select all

x64/filebot.exe	16cf5b91d2e12dcccef94d28dad045a1c41baef92e5b915642f6560aa294b77f
x64/filebot.launcher.exe	7d493fb5fcfee901bb8edee6a64982da54f41f07fa4abb50eab5791d013112f2

Re: New version 4.9.3 with trojan horse?

Posted: 09 Mar 2021, 10:19
by jasper1971
Sorry, I am not that technical I was not able to do what you asked me.

I just uninstalled the application and then deleted every trace and every file from Filebot from my PC, cleaned it and reinstalled it again.

Works fine now

Re: New version 4.9.3 with trojan horse?

Posted: 11 Mar 2021, 18:55
by jasper1971
I was wondering if you tell me how to fix this certification issue, reason being every time I run Restoro it still detects it filebot as a trojen?

Re: New version 4.9.3 with trojan horse?

Posted: 11 Mar 2021, 21:43
by kim
e.g.

Code: Select all

https://get.filebot.net/filebot/BETA/FileBot_4.9.3-portable.zip
https://www.virustotal.com/gui/url/f3cc ... /detection

= 0 / 85 = No virus

what file are you using ?
maybe you can try another

Re: New version 4.9.3 with trojan horse?

Posted: 17 Mar 2021, 12:45
by rednoah
jasper1971 wrote: 11 Mar 2021, 18:55 I was wondering if you tell me how to fix this certification issue, reason being every time I run Restoro it still detects it filebot as a trojen?
You may need to contact the support team of your particular anti-virus software so that they can add this particular file as an example for a false positive for their learning algorithms.

Re: New version 4.9.3 with trojan horse?

Posted: 17 Apr 2021, 22:47
by howdymilsap
The problem is Restoro - this is known as "potentially unwanted program" or PUP. see https://blog.malwarebytes.com/detection ... l-restoro/

get rid of restoro asap.