Plex Media Server Download Infected From Plex Website : https://www.plex.tv/downloads/

General Discussions
21

The infection is coming from your own system, not from plex.tv. There is nothing that can be done from the side of Plex.

22

MovieFan can you supply me with that procedure?

23

Plex Inc digital signature is shown in the two downloads I used to install inside properties.

24

@adamskoog said:
I think the more likely case here is a false positive by your malware software. The version you have has been on the site for 2 days and you are the only report that Iā€™m aware of (Iā€™m running it as well and have had no such problems). The errors you get at the end are due to the quarantine, Plex canā€™t run because files are missing.

It wouldnā€™t be the first time Plex has been flagged as a false positive, likely wonā€™t be the last. Not impossible mind you, but it would be pretty crazy if no one else noticed in that time.

Before I say this, I want to first note that I agree this sounds like a false positive.

That being said, does Plex use multiple download servers? Is there any chance one of them is compromised? This happened to Handbrake a year ago, with one of their mirrors getting compromised. Itā€™s certainly a different situation there, due to their distribution method (and their lack of digital signing of their install file). But worth a mention.

(Again I donā€™t suspect this here, but itā€™s a plausible scenario for everything discussed, so I wanted to mention it)

25

@glenn_k9 said:
MovieFan can you supply me with that procedure?

Open up a windows PowerShell command box and type.

Get-FileHash ā€œfull path to the file, including the filenameā€

26

@ā€œCafe Diemā€ said:
That being said, does Plex use multiple download servers?

Nope. We have 1 location.

Edit - To add a clarification. The download is only available from Plex.tv. We do run Plex.tv through CloudFlare, so technically there could be multiple serverā€™s involved. PMS or any of our apps are not available officially from any other site.

Edit 2 - Oops. PMS and some clients are available from our partner app stores. Google Play, iOS, Amazon, Roku, NAS vendors. I should have just said we do not mirror the downloads available from Plex.tv anywhere else. If you find these from some random app store, these are unofficial.

27

@ā€œMovieFan.Plexā€ said:

@ā€œCafe Diemā€ said:
That being said, does Plex use multiple download servers?

Nope. We have 1 location.

Thanks. I had a hunch this didnā€™t apply to Plex.

28

@cafe Diem After the answers from the MODS I just removed the server. If I re-install it will infect my system again. I simply cannot for the life of me understand why I am able to run installs for other apps but not this one. Iā€™m going to head over to Malware-bytes but the false positive just doesnā€™t jive logically if my .exe file are impacted.

29

Download a trial version of Kaspersky and run a full deep scan on your computer.

I just scanned this, with Kaspersky, and came up with zero threats. If Kaspersky discovered Stuxnetā€¦ yeahā€¦ I hope you understand.