Help - Search - Members - Calendar
Full Version: False Positive: Jpg Encoded In Email As Base64
BitDefender Forum > English > Old Forum Topics > Malware Talk > False positive reporting
Akki234
Bitdefender Internet Security 2009
Version 12.0.10.3

Virus Signatures updated 18.11.2008 22:23
2222203 Virus Signatures
Engine Version 7.21942


Since a few days many of emails in my inbox get flagged as infected. I'm using Mozilla Thunderbird 2.0.0.17.
It is always the same type of alleged malware (Trojan.Script.5758) and it is always a short text-only email with attached jpg-file/s
When I check the attached jpg's after saving them to my desktop they appear as clean. Of course I also checked with www.virustotal.com where they also get flagged as clean.

After some laboring I found this out:
- my jpg's are clean
- Bitdefender gets probably confused by the base64-encoding which is applied to binary attachments by Mozilla Thunderbird

attached is one affected jpg and the same jpg within an email as well
Akki234
Bitdefender Internet Security 2009
Version 12.0.10.3

Virus Signatures updated 19.11.2008 17:39
2223359 Virus Signatures
Engine Version 7.21951


After a night and several signature updates the situation improved a bit. But still there are some false alarms with the symptoms described above.

Attached is one affected jpg and the same jpg embedded within an email in .eml file format.
Akki234
Thanks for resolving this! Everything's working as it should now.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.