CnCNet flaged as malware

[Chas4]

This file is for playing Command & Conqueror Red Alert 1 online.

-Log Details-
Protection Event Date: 7/6/21
Protection Event Time: 12:22 PM
Log File: 12ab46da-de87-11eb-8413-8c16450c62f1.json

-Software Information-
Version: 4.4.2.123
Components Version: 1.0.1358
Update Package Version: 1.0.42766
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1081)
CPU: x64
File System: NTFS
User: System

-Blocked Malware Details-
File: 1
Malware.Heuristic.1003, C:\Games\CnCNet\RedAlert1_Online\cncnet5.exe, Quarantined, 1000001, 0, 1.0.42766, 0000000000000000000003EB, dds, 01321461, 897A537131118F6BE8B606B6B1D6F2E8, 122B333BFE2359724C15E3134DF3DFFF4211586397F2024FE7348EA1BC8683A8

(end)

[Chas4]

Mobile side does not allow code blocks for some reason.

After you install the main game the CNCNet allows you to play online.

https://cncnet.org/red-alert

Edited July 6, 2021 by Chas4

[Porthos]

@Chas4

Hi,

Do you have "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option.

This is normally disabled by default.

In either way, Staff will investigate this and get this fixed. Could you restore the file from quarantine and zip and attach the file here please.

Thanks for reporting!

FYI. This setting is in the experimental stage.

That setting is to detect malformed files, but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed, you can tell the difference between a FP and a legit detection. 

And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine.

Please turn off "Use expert system algorithms to identify malicious files” It is located in Settings > Security> Scan option to avoid these detection's

[Chas4]

Attached the file that is getting flagged 

cncnet5.7z

Edited July 6, 2021 by Chas4

[blender]

Hello,

I am not seeing a detection on this file. Are you still seeing this @Chas4?

[Chas4]

@blenderIt might still be there, the log is from just 4 hours ago.  As Porthos mention Use expert system algorithms was on.

[cli]

Thanks for reporting, this should no longer be detected.