# Malware warnings **URL:** \ **Category:** General Discussions\ **Created:** [September 9, 2022, 7:10pm UTC](https://forums.plex.tv/t/malware-warnings/810119 "2022-09-09T19:10:45Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![donThomaso\_swe](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@donThomaso\_swe](https://forums.plex.tv/u/donThomaso_swe)\ **Post date:** [September 9, 2022, 7:10pm UTC](https://forums.plex.tv/t/malware-warnings/810119/1 "2022-09-09T19:10:46Z")
I’m getting warings in malwarebytes about plex. the IP belongs to protonmail, I still get it when I turn off proton bridge. I tried reinstaling it too. I have no plugins or anything like that, just plex for windows. Malwarebytes -Log Details- Protection Event Date: 9/9/22 Protection Event Time: 9:02 PM Log File: 0011711e-3072-11ed-a695-049226bf21e8.json -Software Information- Version: 4.5.13.208 Components Version: 1.0.1740 Update Package Version: 1.0.59845 License: Premium -System Information- OS: Windows 11 (Build 22000.918) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Program Files\Plex\Plex\QtWebEngineProcess.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Malware Domain: IP Address: 185.159.156.20 Port: 32400 Type: Outbound File: C:\Program Files\Plex\Plex\QtWebEngineProcess.exe (end) ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [September 9, 2022, 7:18pm UTC](https://forums.plex.tv/t/malware-warnings/810119/2 "2022-09-09T19:18:48Z")
It’s a false positive. You can check it yourself with [https://www.virustotal.com](https://www.virustotal.com) ---
**Author:** ![donThomaso\_swe](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@donThomaso\_swe](https://forums.plex.tv/u/donThomaso_swe)\ **Post date:** [September 9, 2022, 7:32pm UTC](https://forums.plex.tv/t/malware-warnings/810119/3 "2022-09-09T19:32:18Z")
but why is plex trying to send some thing to a protonmail IP? ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [September 9, 2022, 7:36pm UTC](https://forums.plex.tv/t/malware-warnings/810119/4 "2022-09-09T19:36:33Z")
> [@donThomaso\_swe](#): > > I still get it when I turn off proton bridge. What is that? ---
**Author:** ![donThomaso\_swe](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@donThomaso\_swe](https://forums.plex.tv/u/donThomaso_swe)\ **Post date:** [September 9, 2022, 7:42pm UTC](https://forums.plex.tv/t/malware-warnings/810119/6 "2022-09-09T19:42:12Z")
It’s for using protonmail with an email client, long shot but since its a protonmail ip i tried it ---
**Author:** ![VBB](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/vbb/32/333130_2.png) [@VBB](https://forums.plex.tv/u/VBB)\ **Post date:** [September 9, 2022, 7:50pm UTC](https://forums.plex.tv/t/malware-warnings/810119/7 "2022-09-09T19:50:01Z")
FWIW, this executable doesn’t exist anywhere in my Plex installation (Windows, 32-bit). Looking at the path on your system, it would seem you’re running 64-bit PMS, so there could be a difference. ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [September 9, 2022, 7:56pm UTC](https://forums.plex.tv/t/malware-warnings/810119/8 "2022-09-09T19:56:52Z")
> [@VBB](#): > > FWIW, this executable doesn’t exist anywhere in my Plex installation (Windows, 32-bit). Then you don’t have the dedicated Player app “Plex for Windows” installed. This file is regular part of Plex for Windows. I have it also on my system. I’ve submitted it to Virustotal and and it is not flagged as malware – even by the Malwarebytes scanner engine. Which means either - you have other malware on your system, which has infected or replaced this file - it is a false positive and your Malwarebytes is confused ---
**Author:** ![VBB](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/vbb/32/333130_2.png) [@VBB](https://forums.plex.tv/u/VBB)\ **Post date:** [September 9, 2022, 7:58pm UTC](https://forums.plex.tv/t/malware-warnings/810119/9 "2022-09-09T19:58:28Z")
> [@OttoKerner](#): > > Then you don’t have the dedicated Player app “Plex for Windows” installed Ah, of course I only thought of PMS and not any player. Good catch. ---
**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\ **Post date:** [December 8, 2022, 7:58pm UTC](https://forums.plex.tv/t/malware-warnings/810119/10 "2022-12-08T19:58:59Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.