Daviddotexe Posted January 18, 2015 ID:930591 Share Posted January 18, 2015 Hello, I believe that this is the correct section to post this kind of topic in. If it isn't then you may feel free to move it. One of my on-demand scanners, HitmanPro, began to detect two instances of malware yesterday. The first being streaming-assets-trine_enchanted_edition.19084816.exe which is located in my AppData\Local\NVIDIA\NvBackend\Packages\000068ef folder and the second being automated_launch.exe which is in AppData\Local\NVIDIA\NvBackend\StreamingAssets\trine_enchanted_edition Both were caught by the Bitdefender engine. I scanned the files with VirusTotal and both have a relatively high detection rating. https://www.virustotal.com/en/file/7d38295e89e590b87637dad75fbf35eb5ca30e016a83d3f2c6cdd9d5a96e3e59/analysis/1421609461/ https://www.virustotal.com/en/file/1cc992cf2495c9cb2169857b3c6c0dfa13f2feacc883f4b18be461bcbe716a8e/analysis/1421609467/ After doing so I ran a complete scan with Malwarebytes and my system came up absolutely clean. I have never had a previous infection on this machine. I did some research and found out that these files are apparently performance settings that GeForce Experience from Nvidia applies to your games (in this case Trine) to best utilize your graphics card. With that being said I think that these are false positives and I've taken no action against them. However, I still find it odd how these files have just been found considering the last time I have played Trine was around a few weeks ago, perhaps even longer. Also, the other games that I have installed have similar files in the NvBackend folder but they are not being detected. If someone here can help me confirm that these are false positives that would be great. I can remove them if they are indeed malicious but I haven't done so as they seem to serve pretty legitimate purposes. As a side note, these are all legal copies of the game that I have purchased through Steam. I will be happy to provide more information if necessary. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted January 19, 2015 ID:930754 Share Posted January 19, 2015 Yes, these is False Detection. Fact that you see much scanners on Virustotal that detected this as a virus is because a lot of them use the same Bitdefender engine. Link to post Share on other sites More sharing options...
Daviddotexe Posted January 19, 2015 Author ID:930907 Share Posted January 19, 2015 Okay. Thank you for clearing this up. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 21, 2015 Root Admin ID:931243 Share Posted January 21, 2015 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts