FaF being deleted by windows defender for containing Malware

[The_Corinthian]

Hi,

My Faf keep getting deleted by windows defender as dangerous Malware.

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Program Files (x86)\Forged Alliance Forever\FAForever.exe
file:C:\Users\Public\Desktop\FA Forever.lnk

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
taskscheduler:C:\WINDOWS\System32\Tasks\{F97A3A74-4703-446C-A219-878978696ADB}
file:C:\Program Files (x86)\Forged Alliance Forever\FAForever.exe
file:C:\WINDOWS\System32\Tasks\{F97A3A74-4703-446C-A219-878978696ADB}
regkey:HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9EFBE673-2E1B-440F-BD6B-511AEBBF84FA}
regkey:HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F97A3A74-4703-446C-A219-878978696ADB}



What gives?

[DukeOfEarl]

Hello,

I don't know which version of FAForever.exe you have, but I had someone else submit their version to virustotal and it comes up clean:
https://virustotal.com/de/file/bbab4e49 ... 487689511/

It also comes up clean on Microsoft's service: https://www.microsoft.com/en-us/securit ... 912cd59cae

Please submit your FAForever.exe there as well and tell me how exactly you installed your current version of FAF.

[Viba]

My results came back negative too

[The_Corinthian]

Hello,

I don't know which version of FAForever.exe you have, but I had someone else submit their version to virustotal and it comes up clean:
https://virustotal.com/de/file/bbab4e49 ... 487689511/

It also comes up clean on Microsoft's service: https://www.microsoft.com/en-us/securit ... 912cd59cae

Please submit your FAForever.exe there as well and tell me how exactly you installed your current version of FAF.

Hi, I don't know what the version was because defender deleted it. But the most recent install was two days ago, and that got automatically removed too.

https://www.microsoft.com/security/port ... terprise=0

[DukeOfEarl]

You will have to try to get Defender to ignore FAForever.exe. Maybe you can use this: https://support.microsoft.com/en-us/ins ... s-defender

[zachyattacky]

As long as you download it from a reputable place such as the faf website I wouldn't worry about it. When I first installed faf my antivirus did the same (webroot) and I didn't play it for over a year which is really sad. Then I finally just installed it and haven't had any problems. Some peoples antivirus are extra sensitive to certain things. I'd imagine its something to do with the way the updates are handled or the fact that its hijacking the faf game and using it.

[Cuddles]

cybrans injecting back doors again.

stay alert.