Participating Frequently

Question

Antivirus detected ame.app.ru_RU.dat file in Adobe Premiere Pro 2025 as possible trojan/virus

Forum|Forum|1 year ago
December 14, 2024
8 replies
6687 views

Hi all,

Have any of you run across this alarming problem when running an antivirus program? I have never had a virus on my Mac, but today a trojan was detected within My Adobe Premiere Pro 2025, right after I updated to Sequoia and right after updating to the latest Premiere. The file in question is: amended.app.ru_RU.dat.

Should I be worried about this?

Thanks!

User experience or interface

C

Carlos Ziade

Community Expert

Most likely a false positive by AV... Adobe will never ship malware with its products.

Anyway, check the file path, if it is in Adobe paths -> false positive.

If in another path outside Adobe, this could be suspicious, drop it into Virus Total,

check the hash and whether other AV vendors flagged it as malware.

In this case it could be a malware masquerading as an adobe file, and here it is not from legit

Creative Cloud downloads or updates, but rather your system could be infected from somewhere else,

and you have to do security checks.

S

Sandra259976632sad

Participant

Yep. Luckily my Norton catches them. I wish Adobe kept '

clean downloads!'

Ann Bens

Community Expert

Ditch norton and use windows defender: no more false positives

Stargazer on ARM

Known Participant

An old thread but still relevant to this date:

I just got two of those (ame.app.ru_RU.dat), one in Premiere and one in Media Encoder. Im running Norton 360 on Mac OS Sequoia 15.3, and made two clean CC suite installations from scratch within the past two months from the Adobe site using a freshly new downloaded and installed CC desktop app both times (installation, complete uninstallation of all Adobe Apps, reinstallation).

Both installations carried the ame.app.ru_RU.dat (or the remains/trace of) it in both AP and AME and it might be a lingering "ghost shell" of a virus removed by Adobes virus protection. Antivirus apps often mark up cleaned files with some kind of meta tag containing the virus file name to keep track on wich files has been cleaned and from what.

Theese tags doesn't contain the actual virus and can do you no harm, but other antivirus apps (at least the good ones) will trigger on the virus file names, remove them and give you a really good scare. The really good news is that your virus protection is working and will probably keep you safe.

It happens more often than you think, and we have most likely nothing to worry about. Right Adobe? 🙂

Sincerely yours and all the best regards,

Stargazer

R Neil Haugen

Legend

In the past, several of the antivirus/anti-malware apps have posted 'virus!' warnings on things like the file that has the Russian language data set in it ... which didn't have any "removed" viruses/malware in it at all. I think the general speculation was certain file types (the letters after the period) with a .ru bit in them make some AV/AM apps see stuff everywhere.

Everyone's mileage always varies ...

Stargazer on ARM

Known Participant

OK thanks, I was just speculating on plausible causes.

It seems you might be right on the spot there. I followed the path and the source seems to be in the dictionary part of both Premiere/Media Encoder in the ru-RU section, technically the threat was identified as a script SNH-gen [Trj] in the file ame.app.ru_RU.dat, and according to Norton 360 it's a trojan horse.

Not sure what to do with a Russan language modul though, it's all greek to me 😄

Anyway, thanks for clearing that up!

Best regards and all that 🙂

Stargazer

K

Keith Evanson

Participant

I'm here because I received the same flag. I have a paid version of AVG. I hope the expert panellists are correct and it's a false positive.

R Neil Haugen

Legend

I've used the CC apps for over a decade. Major time on the forums here and elsewhere.

I have never heard of any virus or malware distributed by the CC Desktop app. Period.

Every once in a while, some build of a virus app (normally the free version) will report false positives.

Adobe distributes a ton of apps across different systems. Including business documentation verification apps used by governments and military contractors. Their anti malware capabilities are some of the highest around.

Everyone's mileage always varies ...

K

Karen30485140e57oAuthor

Participating Frequently

Thanks, R Neil, for your continued reassurance. I've been using Adobe software for 20+ years and still got freaked when the AV software found a trojan. I think both adobe and the AV software should inform us that a glitch like this can happen. It causes unnecessary stress. With all the security meaures we are told to take to protect our digital selves, are we supposed to just shrug this off without asking questions? I think we should, to be safe, even if it's Adobe.

K

Karen30485140e57oAuthor

Participating Frequently

I think this is the first time I've posted on this community and want to thank you all for jumping in to help. This issue literally sent me on anxious high alert. If anyone else has any additional info on this, please share. Otherwise, thanks, all!

MyerPj

Community Expert

You're welcome. Check in here frequently, you can learn many things, including the way PP is going in development. Premiere Beta

MyerPj

Community Expert

It appears to be just a text file:

MyerPj

Community Expert

I have 4 of them on my c: drive, all the same.

Ann Bens

Community Expert

Guessing it's a false positive. Premiere does not install virus' or whatever.

Might want to get a different virus scanner.

K

Karen30485140e57oAuthor

Participating Frequently

Thanks Ann, I'm usuing Avast antivirus. I've read online that others have experienced this using AVG. I also read that Avast and AVG are essentially the same, owned by the same company.

I used Creative Cloud to update Premiere, so hoping it's legit and not a virus. But would like to know definitively if this is something that is happening to others and not a real threat.

Peru Bob

Community Expert

If you are downloading directly from Adobe, it is a false positive.

K

Karen30485140e57oAuthor

Participating Frequently

Correction:

the file in question is ame.app.ru_RU.dat

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded