# Trojan Detected

**URL:** <https://forums.plex.tv/t/trojan-detected/462855>\
**Category:** General Discussions\
**Tags:** server-windows\
**Created:** [September 17, 2019, 1:41pm UTC](https://forums.plex.tv/t/trojan-detected/462855 "2019-09-17T13:41:17Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![FrankJr35521](https://avatars.discourse-cdn.com/v4/letter/f/aeb1de/32.png) [@FrankJr35521](https://forums.plex.tv/u/FrankJr35521)\
**Post date:** [September 17, 2019, 1:41pm UTC](https://forums.plex.tv/t/trojan-detected/462855/1 "2019-09-17T13:41:18Z")

</div>

malwarebytes is detecting plex as a trojan here is the log taken from malwarebytes this is the first time im seeing this

Malwarebytes

-Log Details-  
Protection Event Date: 9/16/19  
Protection Event Time: 10:49 AM  
Log File: 22a46952-d891-11e9-9638-c8d3ff41ae7a.json

-Software Information-  
Version: 3.8.3.2965  
Components Version: 1.0.625  
Update Package Version: 1.0.12501  
License: Premium

-System Information-  
OS: Windows 10 (Build 18362.356)  
CPU: x64  
File System: NTFS  
User: System

-Blocked Website Details-  
Malicious Website: 1  
, , Blocked, [-1], [-1],0.0.0

-Website Data-  
Category: Trojan  
Domain:  
IP Address: 193.188.22.12  
Port: [32400]  
Type: Inbound  
File: C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe

(end)

---

<div class="post-metadata">

**Author:** ![dane22](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/dane22/32/4389_2.png) [@dane22](https://forums.plex.tv/u/dane22)\
**Post date:** [September 17, 2019, 1:46pm UTC](https://forums.plex.tv/t/trojan-detected/462855/2 "2019-09-17T13:46:47Z")

</div>

Malwarebytes does this from time to time!

It’s a false alert

---

<div class="post-metadata">

**Author:** ![FrankJr35521](https://avatars.discourse-cdn.com/v4/letter/f/aeb1de/32.png) [@FrankJr35521](https://forums.plex.tv/u/FrankJr35521)\
**Post date:** [September 17, 2019, 2:46pm UTC](https://forums.plex.tv/t/trojan-detected/462855/3 "2019-09-17T14:46:40Z")

</div>

ok thx

---

<div class="post-metadata">

**Author:** ![XweAponX](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/xweaponx/32/81758_2.png) [@XweAponX](https://forums.plex.tv/u/XweAponX)\
**Post date:** [September 17, 2019, 4:50pm UTC](https://forums.plex.tv/t/trojan-detected/462855/4 "2019-09-17T16:50:55Z")

</div>

You should be able to add an exclusion for Plex media server into malware bites. Check in the app settings and exclude the main Plex executable process and maybe some of the other processes related to Plex. Actually I think the portion of the log that you posted includes which process was affected so just make an exclusion for that process. All of the executables for Plex media server are in c:\program files (x86)\Plex\Plex Media Server, just choose the executable that was listed in the log. Screenshot of executables:

 ![image](https://global.discourse-cdn.com/plex/original/3X/c/8/c8f7a67c559aa8200451a1569c2eac4d681932a4.png)

---

<div class="post-metadata">

**Author:** ![nibbles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/nibbles/32/150497_2.png) [@nibbles](https://forums.plex.tv/u/nibbles)\
**Post date:** [September 17, 2019, 5:15pm UTC](https://forums.plex.tv/t/trojan-detected/462855/5 "2019-09-17T17:15:55Z")

</div>

There’s a Plex article on Malwarebytes, and it’s covers whitelisting because their software doesn’t behave.

[https://support.plex.tv/articles/windows-transcoder-failures-during-playback-live-tv-or-dvr-recording/](https://support.plex.tv/articles/windows-transcoder-failures-during-playback-live-tv-or-dvr-recording/)

---

<div class="post-metadata">

**Author:** ![XweAponX](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/xweaponx/32/81758_2.png) [@XweAponX](https://forums.plex.tv/u/XweAponX)\
**Post date:** [September 18, 2019, 5:52pm UTC](https://forums.plex.tv/t/trojan-detected/462855/6 "2019-09-18T17:52:52Z")

</div>

Yep, that’s it, they say to exclude all of the executables. I think with Malware Bites, you can choose the whole Plex folder, so just exclude the folder itself. I removed MWB a log time ago because of this.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [December 17, 2019, 5:53pm UTC](https://forums.plex.tv/t/trojan-detected/462855/7 "2019-12-17T17:53:00Z")

</div>

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
