Jump to content

Potential False Positive: SkyrimLauncher.exe


seislund

Recommended Posts

I have been playing Skyrim on another computer and have run the attached file, SkyrimLauncher.exe, without any issues. However, when I migrated to a new computer, Malwarebytes detected this file as Malware.Heuristic.1001. On my other computer, when I scanned the file with Windows Defender and Malwarebytes, the file was fine. However, when I scanned it on my new computer, Malwarebytes detected it as malware while Windows Defender did not. I haven't run the file yet in case it is actually malware, but given my previous scans on my old computer, I am not sure that it is. I have attached the file and the scan log. Thank you in advance for your help!

SkyrimLauncher.zip Scan Report.txt

Link to post
Share on other sites

7 minutes ago, seislund said:

Thank you in advance for your help!

Hi,

Do you have "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option.

This is normally disabled by default.

In either way, Staff will investigate this and get this fixed.

Thanks for reporting!

FYI. This setting is in the experimental stage.

That setting is to detect malformed files, but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed, you can tell the difference between a FP and a legit detection. 

And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine.

Please turn off "Use expert system algorithms to identify malicious files” It is located in Settings > Security> Scan option to avoid these detection's

Link to post
Share on other sites

7 minutes ago, Porthos said:

Hi,

 

Do you have "Use expert system algorithms to identify malicious files" enabled? It is located in Settings > Security> Scan option.

 

This is normally disabled by default.

 

In either way, Staff will investigate this and get this fixed.

 

Thanks for reporting!

 

FYI. This setting is in the experimental stage.

 

That setting is to detect malformed files, but sometimes legit files use protection that make them malformed. Malwarebytes is still tweaking the algorithms that is why it’s off by default. If you switch it on it is assumed, you can tell the difference between a FP and a legit detection. 

 

And if you keep it on, I suggest also turn off auto quarantine. Gives you the time to report FP's and not go thru the extra step to have to restore from quarantine.

 

Please turn off "Use expert system algorithms to identify malicious files” It is located in Settings > Security> Scan option to avoid these detection's

Hi there! I looked at my settings and saw that I did have "Use expert system algorithms to identify malicious files" enabled. I turned it off and on again, and I got different results. When I turned off the option, the scan gave me a result saying that no files in my Skyrim directory were malware, and when I turned on the option, the scan said that SkyrimLauncher.exe was malware. Thank you for your advice, and I look forward to the file being scanned by Staff.

  • Like 1
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.