Last update 2019.05.24 identifies system files as trojans

[TempLost]

I've got a Leagoo M8 Pro (had it for 18 months) running Malwarebytes Premium. The last update, when scanning, suddenly reports 67 system apps as being infected with a trojan Trojan.spy.agent. Is this a case of false positives? I don't see any infections and have had no problems. Is this just because it's a Chinese phone? 

[vinnie_blues]

Hi 

I have this problem too tonight  my system scans as malware

[vinnie_blues]

I also did a full factory reset and scanned my android box and still got malware on my system files as to be false  hope there is a fix for this

[M_i_k_e]

Same problem here - all system files claimed to be infected. 100 % false positive.

[vinnie_blues]

Is there going to be a fix for this

[M_i_k_e]

Just scanned my device with some other antivirus tools.

Kaspersky finds nothing

Sophos finds nothing

Avira finds nothing

Malwarebytes still finds 98 "infections" on all system files. So I can just recommend everyone to IGNORE these "infections" until the signature files are fixed by Malwarebytes.

[TempLost]

Yes, as I posted in another thread, I've added the 67 supposedly infected files to the white list - and will test out the next Malwarebytes for Android malware database to see if it's been corrected, probably by moving just one of the items off the white list to see if it's still flagged as malware. Has anybody actually reported these false positives to support, in addition to posting here? 

[M_i_k_e]

I wrote to the support via email yesterday, no answer yet. I also wrote them on Facebook but they aren't there on weekends.

[TempLost]

Great, thanks- no doubt they get to it after the weekend. I was beginning to wonder, now that I'm using a Chinese Leagoo phone alongside a Huawei 4G router, if I might have to ditch them and resort to carrier pigeon and slide rule for communication and calculation! 

[GMB]

Hi all, 

Is it possible to get a the exact naming of detection, was is Trojan.Spy.Agent or something is in the end? I will try to forwared the information, to resolve it quickier.

 

[vinnie_blues]

[GMB]

Got it, thanks, will be resolved with next db update, we will try to push it asap. 

[TempLost]

Thanks - will look forward to the revised database updates.

[M_i_k_e]

Thanks, after the update no infections detected.

[Bluewall]

I got this same Trojan.spy.agent with a whole heap of my system apps on my teclast tablet and I honestly freaked out just a little ahah. After updating the database and rescanning I was relieved that it went away. Was this all just a false positive? 

[TempLost]

Yes, indeed, same for me, I removed the 67 items from the whitelist and rescanned after the latest update - no malware detected. False positive....... 

[Bluewall]

Good news indeed! I was like thinking "well Chinese branded androids maybe aren't the best option then" but glad to see that this indeed just was a false positive. Now with it being 1:19 am I can finally relax about this ahaha