Virus Detected from Manga's Art Images Download

[fadingbang]

There is an issue where whenever I download the volume front page from the art section of the manga, my McAffe AV detects the file as a virus
I thought it must some DRM-based issue so for once I pulled it out of quarantine but the after few minutes of opening and closing the file, my AV again raised the flag
I would like you guys to check if it's a false detection or something wrong is going on

 

[BraveDude8]

What manga is it, what image is it specifically, and does it have the word "Cheat" in the filename?

some DRM-based issue

There's no DRM on MD, for the record.

 

[fadingbang]

What manga is it, what image is it specifically, and does it have the word "Cheat" in the filename?



There's no DRM on MD, for the record.

https://mangadex.org/title/4809bb6c-1af2-41c5-9291-983027602d7f/shy

(The other title did had cheat in it but the issue is also happening in this title which doesn't have cheat)
(also can you ping me next time? the notification didn't came up for this thread but already had a reply in it)

 

[BraveDude8]

https://mangadex.org/title/4809bb6c-1af2-41c5-9291-983027602d7f/shy

(The other title did had cheat in it but the issue is also happening in this title which doesn't have cheat)
(also can you ping me next time? the notification didn't came up for this thread but already had a reply in it)

Which image, specifically?

 

[fadingbang]

Which image, specifically?

Every image but let's say Volume 12 image
(also sorry for late reply)

 

[BraveDude8]

Every image but let's say Volume 12 image
(also sorry for late reply)

Virustotal says it's clean, can you post a screenshot of the exact message you're getting from McAfee? I'm assuming it's a false positive at this point.

 

[fadingbang]

Virustotal says it's clean, can you post a screenshot of the exact message you're getting from McAfee? I'm assuming it's a false positive at this point.

Then I will do it when I will open my laptop tomorrow
(It's 3AM and I don't wanna wake up everyone, so sorry for the inconvenience 😔)

 

[fadingbang]

Okay I am now sending the screenshot links.

 

[fadingbang]

Virustotal says it's clean, can you post a screenshot of the exact message you're getting from McAfee? I'm assuming it's a false positive at this point.

https://imgur.com/a/Gm8GaPm

@BraveDude8 ?

 

[fadingbang]

Virustotal says it's clean, can you post a screenshot of the exact message you're getting from McAfee? I'm assuming it's a false positive at this point.

@BraveDude8 can you please look at these screenshots

I can also take the risk to replicate the same virus warning if you want

 

[BraveDude8]

@BraveDude8 can you please look at these screenshots

I can also take the risk to replicate the same virus warning if you want

I have absolutely no idea what it detected, but the image file we're hosting is clean and even McAfee agrees with that via Virustotal.

See if you can trigger it again by redownloading the same image.

 

[fadingbang]

I

I have absolutely no idea what it detected, but the image file we're hosting is clean and even McAfee agrees with that via Virustotal.

See if you can trigger it again by redownloading the same image.

I will do that, possibly with screen recording

 

[kohelemon]

@fadingbang Sometimes Virus Protection apps will go wild on unrecognized links, downloads and more.
Unrelated but sort of aligning with this, since the LOTRO (Lord of the Rings Online) Server Connection to Home is different than most games. Upon updates Norton will not allow connection until I validate it.
Case in point, check if your virus protection is being "Too-Protective".

 

[fadingbang]

@fadingbang Sometimes Virus Protection apps will go wild on unrecognized links, downloads and more.
Unrelated but sort of aligning with this, since the LOTRO (Lord of the Rings Online) Server Connection to Home is different than most games. Upon updates Norton will not allow connection until I validate it.
Case in point, check if your virus protection is being "Too-Protective".

I was thinking that too but after pulling out it off quarantine and using it in photoshop it again got flagged

 

[kohelemon]

huh... weird

 

[BzzBzz]

Google for "jpegtran" and download it.
Extract it somewhere, copy your file there.
Open console then type

jpegtran -copy none yourflaggedimage.jpg newnameimage.jpg

and press enter.
This will remove any nonimage data from file. Scan newnameimage.jpg again. If av still flag it send it to mcafee support then it's 140% false positive.

Don't resave flagged image in photoshop or any other image editor since most (all?) of them will copy all nonimage data to new file.

 

[fadingbang]

Google for "jpegtran" and download it.
Extract it somewhere, copy your file there.
Open console then type

jpegtran -copy none yourflaggedimage.jpg newnameimage.jpg

and press enter.
This will remove any nonimage data from file. Scan newnameimage.jpg again. If av still flag it send it to mcafee support then it's 140% false positive.

Don't resave flagged image in photoshop or any other image editor since most (all?) of them will copy all nonimage data to new file.

Thanks I really needed such advice
I will close this thread if this is successful

 

[fadingbang]

Well I have replicated the virus error for now
One thing is noticed is that this didn't happened when I used Brave Browser, so maybe it's because of Microsoft Edge Virus detection not McAfee

 

[tristan9]

The solution is to use a better antivirus at this point.

There’s no such thing as viruses embedded inside image files.
It is possible to bait some bad AVs with suspicious metadata, but that doesn’t make it a virus, it merely triggers a very bad AV engine.

Still unexplainable why anyone would give their money to McAffee in 2023.

 

[fadingbang]

The solution is to use a better antivirus at this point.

There’s no such thing as viruses embedded inside image files.
It is possible to bait some bad AVs with suspicious metadata, but that doesn’t make it a virus, it merely triggers a very bad AV engine.

Still unexplainable why anyone would give their money to McAffee in 2023.

It's was OEM installed with one year subscription so I didn't bought a separate one and was waiting for the subscription to end for buying a new one (my PC is still less than 1 year old)