Yesterday I was notified by my anti-virus, Norton, that my computer was at risk, at the time I didn’t check to see where it was coming from. However, today the same notification popped up when running an update on an item that had an incorrect match. So, I decided to check out the notification and to my surprise it is coming from PLEX.
I am running Plex Media Sevrer Version 1.13.5.5332.
The virus/malware details are as follows:
An intrusion attempt by safety.apple.com.fkfvlgp.online-software-security-check-version-2b6a3f.club was blocked
Network traffic from safety.apple.com.fkfvlgp.online-software-security-check-version-2b6a3f.club/o/en/index.php?browser=Safari&fred=1&app=Advanced MacCleaner&hul=t.t6k3g7n5utih.science&cep=a-E8KPwN-n5ZpGwEw5tRextgJx_nH2lUc1E7l8X9ekb6Nn3OSdYmXmciZMS8MDbhk_pBDRGB6plzsJQcE0C2L4iYV7ycIVauyVYpe5GDz1rcV-Vk4Q4gP1ZEWPCOrJ0pr1Rj8RODA7CLnv-yRB6S4Apop4NeUhMjMIoHVzUbTz8URC3wHrMA80SkUimnvs-nqzcOUK7Gx22Yg9t5BjF75rMyHd6bZ8mBBO34KBR7mcitveJy1NxoYw4Lh9EzDWzrEfqdMRP4rNfEW0h1Ikr8BDs13Uxs1cPfQ0_h3feysfdf3SoJDcQIpoESjLkcqGyW0RUDwVRzaujuocNSUsxh-naD8TPB-QrT9loCMS-Gwveg1wkrMk0syhTI2-pahi0a&source=114391510&keyword=&cpv=0.0016&bid=0.0016 matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME2\PROGRAM FILES (X86)\PLEX\PLEX MEDIA SERVER\PLEXSCRIPTHOST.EXE.
Could you please clear this up as I have never had any issues with viruses or malware using PLEX before, so I’m not very happy some have been included in the latest version.
So what crosses my thinking is if you remember exactly what you had plex do to trigger the AV…
~ running a podcast
~ using some channel
~ idk, you tell me
Been using Norton for many years and never had any problems with it. Been using Norton since before PLEX, and up until recently PLEX has never flagged anything. So it’s not the virus software.
P.S. if you haven’t got anything decent to input, stop wasting your own time, and use that to be constructive somewhere else.
I was just updating a match that was incorrect, but yesterday two different lots of notifications popped up with similar malware/virus alerts and I’m sure I wasn’t doing anything with it at the time, so it might have been the butler running an update.
interesting well that’s good, see if you can gather some more info and hopefully repeat the warning… then you/we can check the logs in the Plex help setting. The AV will keep you safe so don’t worry too much IMHO.
-wbm
ps. try to keep track of the exact time in order to correlate it with the logs, thx
I have just done a library update from the task bar icon and also run the same function I did before on the same video to fix the match but I have had no notification this time. So I’m unsure why this is happening, but the last time it did, it did point to that PLEX script - PLEXSCRIPTHOST.EXE
The real domain is fkfvlgp.online-software-security-check-version-2b6a3f.club
You might wanna disable any 3rd party plugins you might have installed into Plex server.
Hi, I haven’t added any additional plugins to the Plex Media Server for a long time, is there any documentation on which ones are in the plugin folder by default, or could you let me know which should not be removed?
