False Positive - XIVLauncher (Final Fantasy XIV unofficial game launcher)

[dragothica]

As of today, Malwarebytes Anti-Malware Premium is detecting "XIVLauncher (Final Fantasy XIV unofficial game launcher)" as False Positive. In Windows 10 the files are located in:

 

C:\Users\(user)\AppData\Local\XIVLauncher

 

Detected as Threat and quarantined, which prevents using the launcher program.

[miekiemoes]

Hi,

Unfortunately we can't do anything with the above info or verify if an FP since we don't have the file or don't know either as what it is detected.

So can you post/attach the file and the detection log please?

 

[TheDillio]

Hello i want to add to this as it has started happening to me just tonight. Attaching my log file, I cannot attach the main file 
But here's the link to the site which the file came from. https://goatcorp.github.io/

Malware XIV.txt

[Bombarding]

Log FIle XIVLauncher.txt 

This is the first time I have seen MBAM flag this launcher as malicious, even on update. It would be great if MBAM can confirm the files in question are infact FP and can be added to the whitelist.

Most recent release: https://github.com/goatcorp/FFXIVQuickLauncher/releases/tag/6.3.16

[Bombarding]

Attached the exact files from detection in zips.

XIVLauncher.zip XIVLauncher.zip XIVLauncher-6.3.16-full-nupkg.zip

[miekiemoes]

Hi,

This is indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed.

Thanks for reporting!

[Bombarding]

3 minutes ago, miekiemoes said:

Hi,

This is indeed a false positive by our additional machinelearning engine we have implemented.
This will get fixed.

Thanks for reporting!

Thank you so much @miekiemoes for the quick responses and confirmation. Appreciate all of yours and the mbam teams help!

[miekiemoes]

You're most welcome. :)