If you get false positive with your antivirus, please report to this thread

[Tabajara]

Verify your game cache and whitelist/filter your zps.exe as temp fix til your anti virus program receives an update to fix this issue happening in other games as well.

[Nodtank 1313]

My Microsoft Defender Antivirus detects Trojan:Win32/Yomal!rfn in my zps.exe.

[Scudd]

My zps.exe had the same false positive as the post above.

[Nyctus]

Steam told me that it was a "virus or malware". I'm surprised that Windows Defender didn't intervene in any way.

Now ZPS is just sitting in a 'Download Failed - Failed to Write to Disk" state. Even reinstalling it didn't help.

[Shepard]

Originally posted by Nyctus:

Steam told me that it was a "virus or malware". I'm surprised that Windows Defender didn't intervene in any way.

Now ZPS is just sitting in a 'Download Failed - Failed to Write to Disk" state. Even reinstalling it didn't help.
:aunope:

You need to add "zps.exe" in the list of exception before validating your ZPS files, otherwise, Windows Defender will just delete the EXE as soon as it sees it and Steam will report the error you're showing.

If the EXE has already been deleted, you can temporarily create a "dummy text file" which you need to call "zps" and make sure it has the "exe" extension and use it to add as exception, then delete that dummy file and validate the files again.

Turning off temporarily Windows Defender, validating ZPS files, adding the EXE as an exception then turning Windows Defender back on is also an option.

[Shepard]

To complete Tabajara (OP)'s post, I have uploaded "zps.exe" yesterday to VirusTotal and you can see the results here[www.virustotal.com].

These 9 AVs of 72 who "claim" that "zps.exe" is a trojan are either AVs for "corporate/enterprise usage" or some weird exotic names that likely no one heard before. What's important is to look at all the major ones such as Avast, AVG, Avira, BitDefender, ClamAV, ESET-NOD32, Kaspersky, GData, Malwareantibytes and so on. All of them say that "zps.exe" is safe.

It's also surprising (funny) to see that "Microsoft" (Windows Defender) is in the list of AVs saying it's safe.

[billyplayer001]

Same, I got Trojan:Win32/Yomal!rfn

[Molotov]

Also have the same issue of windows defender saying that it is a Trojan:Win32/Yomal!rfn

[Da Doom Man]

Yeah i'm getting that issue too.

[ShadyZ]

same

[Shepard]

My Windows Defender installation just received an update and I'm also impacted by this issue.

I have opened a "false positive" report/claim to Microsoft, we'll see if they will fix the problem.

[Gagarine DERANK service]

any simple fix ?

[Shepard]

Originally posted by Gagarine DERANK service:

any simple fix ?

Originally posted by Shepard:

You need to add "zps.exe" in the list of exception before validating your ZPS files, otherwise, Windows Defender will just delete the EXE as soon as it sees it and Steam will report the error you're showing.

If the EXE has already been deleted, you can temporarily create a "dummy text file" which you need to call "zps" and make sure it has the "exe" extension and use it to add as exception, then delete that dummy file and validate the files again.

Turning off temporarily Windows Defender, validating ZPS files, adding the EXE as an exception then turning Windows Defender back on is also an option.

[ACTIONBOMBA™]

how about fixing your game instead of advicing people, deleteing file x or file y?!

i mean...wtf?

[Shepard]

Originally posted by ACTIONBOMBA™:

how about fixing your game instead of advicing people, deleteing file x or file y?!

i mean...wtf?

As mentioned above, this is not a ZPS specific problem as other games are also impacted (War Thunder to quote one of them) and other main AVs solutions don't consider ZPS as a "threat" (see the VirusTotal report above).

The issue is on Microsoft's side, not ours so we can't do anything besides issuing a "false positive" report (which we did) and wait for them to treat it.

[Shepard]

UPDATE #2: Microsoft broke their AV again and the issue re-appeared since definition version 220. We decided to fix this issue ourselves once and for all by shipping a tiny ZPS update.

UPDATE: Microsoft fixed the issue and ZPS should no longer be detected as a trojan. For those who (still) have the issue, please follow these steps:

• 1) Open Microsoft Defender's settings (you can double click on it's icon in the system tray).
  
• 2) Click the giant "Protection against viruses and threats" button (the big shield icon, you can't miss it).
  
• 3) Scroll down to "Updates to protection against viruses and threats", there should be a "Search for updates" link, click on it.
  
• 4) Press the "Search for updates" button, make sure after the update that the definition version is "1.423.210.0" or above.
  
• 5) If you added "zps.exe" to the exclusion list, you can remove it.
  
• 6) You can scan "zps.exe" (right-click on it --> "Analyze with Microsoft Defender") and confirm it's no longer falsely detected as a "trojan".
  
• 7) If you're getting an error while starting ZPS, verify your game files.