Malware.AI mistakenly flagged Rome Total War mod as malware

[xsithspawnx]

I was loading up the Rome Total War mod "Roma Surrectum 2" today and Malwarbytes flagged it as malware and quarantined it. I've been playing this game and this particular mod for over a decade and it is not malware of any kind. It's not a new download of the game/mod or anything either, and this version hasn't had any recent patches, etc. that could account for some new change to the files. The mod does use a separate launcher from the base game and it looks like it is just the .exe for this launcher that is being flagged as I tried running the base game with no issues. I was able to whitelist the mod/game and I'm able to play it again, but I figured I'd post this here reference. I clicked the link it gave me when the .exe was blocked and it took me to this link. https://www.malwarebytes.com/blog/detections/malware-ai

 

[Porthos]

@xsithspawnx

Please restore the file from Quarantine and zip and attach the detected file.

 

Please see the following on how to zip files if needed.

https://support.microsoft.com/en-us/windows/zip-and-unzip-files-8d28fa72-f2f9-712f-67df-f80cf89fd4e5

You can alternatively upload the restored file to Virus Total and provide the link to the scan results.

[xsithspawnx]

Roma Surrectum II.zip

[Porthos]

And here is the log for the staff on your behalf.

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 8/7/2024
Scan Time: 10:10 PM
Log File: d4124186-5533-11ef-be2e-001a7dda7102.json

-Software Information-
Version: 5.1.7.121
Components Version: 1.0.5002
Update Package Version: 1.0.87610
License: Premium

-System Information-
OS: Windows 10 (Build 19045.4651)
CPU: x64
File System: NTFS
User:

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 8 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Malware.AI.3434651508, C:\MALWARE TEST NO WD\ROMA SURRECTUM II\ROMA SURRECTUM II.EXE, No Action By User, 1000000, -860315788, 1.0.87610, 37EE2BC155D400AACCB89F74, dds, 02946264, 62B21466A0D6732715E149835614280E, 9F03A7644B04D232880BC7920F98C706B2DB049AB6837EFDE53E5951CED62A57

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

[xsithspawnx]

Thanks.

[miekiemoes]

Thanks for reporting. This is an FP indeed and will be fixed.