Why does google console think images are malware?

Question

Google

Tech support sent a document that won't work until we remove the malware. They sent what malware was for them: it turned out to be ordinary svg and jpeg images.
How to get rid of this problem? (the img tag before the image contains the full path, starting with https)

Answer 1

Trust jpeg antivirus. You can try to squeeze it.
SVG is generally possible to open and look inside.

Answer 2

In addition to what has already been said ...
The site (server) may be infected. Once upon a time))), a script was inserted into the pictures (for example, PHP) and a special shell launched it. An attack was carried out on behalf of your server.
Possible situations invented in 5 minutes))):
1. You save the jpeg and it is immediately (almost) modified. Look at file properties - date, size.
2. Changes jpeg occur on the fly. Instead of just giving the picture, it is modified and sent to the server. And here you can see everything.