ESET reports Aslain's WoWs ModPack v13.6.1 #00b is a virus

[Dog_in_Tank]

Hello all,

 

My ESET started screaming that file is infected. It actually classifies it as "suspicious file". MBAM and Virus total says its clean, but since the file is very recent maybe DBs haven't been updated yet.

 

Anyone else had similar with some other AV? This was the first time in years that ESET reacted to something from Aslain's.

[DDevil]

Same, getting flagged, and removing it from quarantine and scanning again it flagged it as "removed, as it only contained virus body".

[icarus17bb]

Hi

I have same issue with ESET av.. and with this security suite I found no way to unlock the modpack file.
Anyone can give help?

THX

[Theolitius]

sadly that is often the case with newer released installers and a false flag

if you are not trusting it, you can always upload the file to https://www.virustotal.com/ that will compare it to multiple AV database
always make sure to get it from trustworthy websites and you can compare sha-256

you can try to add the installer to the white list or disable it for a few minutes

[tsili]

Hi guys,

 

Have same issue with ESET, first time reacted to aslains' mod. Is something changed ?

So now what we can do ?

Also same image to me coming from eset as Dog_in_Tank (from Chrome app)

[DDevil]

I have submitted it for analysis, to hopefully get it tagged as false positive and unblock.

[Aslain]

It is false positive, I'm 100% sure I dont need to be ensured, my exe is always safe.

[Dog_in_Tank]

Hello Aslain and all,

 

Issue here is that there is always chance of "supply chain attack". If your accounts were breached someone could have uploaded the tainted version with some malware.

 

So its better to ask and check.

[Aslain]

17 hours ago, Dog_in_Tank said:

Hello Aslain and all,

 

Issue here is that there is always chance of "supply chain attack". If your accounts were breached someone could have uploaded the tainted version with some malware.

 

So its better to ask and check.

Thats why I provide SHA256, compare it with the one I provide in the download thread. If it matches, then you have the same file I created. Well if you even dont trust the one from this thread then you can also PM me and ask me for my SHA256 from my PC.