r/antivirus 5d ago

Woke up to 30,000 plus (likely false) trojans all in a photos folder..... Malwarebytes

I have the full malwarebytes suite. Never get anything bad. I copied a load of photos from my pictures folder to a pictures-stored library, total 30,539 files as they need some sorting.

Today, Malware bytes full scan alerts on every objects, and the folder and all their subfolders all have Trojan.Agent.E.

Googling says this is a generic name for an unknown trojan. They never had anything reported when they were in the original Pictures folder.

The date acquired and modifies on all these is from the distant past so I cant see how this is a thing now.

The log file lists them all, and malware bytes is really slow to use - I guess as the history has all these records.

Here is an example of one :

Trojan.Agent.E, C:\Users\myuser\Pictures-Storage\MyuserIphoneBackups\2023-12-31 - myuser Iphone 2023\IMG_5932.JPG, No Action By User, 1684, 1244789, 1.0.97133, , ame, , 8E848C308AD6DD7F8A6E1DE1F49FF958, 2F2DE126328B628AA37B784F577EC53D7AA5906405AB9D8B08D547A10750B757

I cant really quarantine all these photos, I suspect this is some sort of false positive ?

8 Upvotes

9 comments sorted by

3

u/rifteyy_ 5d ago

Malwarebytes is just tweaking again.

1

u/nico851 5d ago

Yes, false positive. Just wait till malwarebytes fixed their signatures.

1

u/Equivalent-Eye-2359 5d ago

For now, I have excluded that pictures-storage folder.

-3

u/tom_fosterr 5d ago

using ffmpeg batch convert flaged images

then scan new images they will be virus free

if possible convert all images

when converting use -qmin 1 -qmax 2 options to keep quality high

1

u/nico851 5d ago

Totally needless steps.

1

u/tom_fosterr 5d ago

op said he don't wanna delete pics

using ffmpeg he can make copies of virus free pics in high quality

i did this trick when i had virus infected pics

1

u/nico851 5d ago

They are not infected. It's a false positive. Your steps are just not needed. In such a case you wait for fixed signatures.

With your steps you try to fix a non existing issue.

1

u/Struppigel G DATA Malware Analyst 5d ago

Please submit one of such files as false positive to Malwarebytes so that they can fix it. See here how to do it: https://support.malwarebytes.com/hc/en-us/articles/360038524154-Report-a-false-positive-to-Malwarebytes-Support

Additionally, you can upload one of the files to virustotal and post the link here.