Trojan:Win32/Bearfoos.A!ml

[ZollCore]

False positive?
Detected: Trojan:Win32/Bearfoos.A!ml
Status: Removed
A threat or app was removed from this device.
Date: 2/5/2025 4:03 PM
Details:This program is dangerous and executes commands from an attacker.
Affected items: file: E:\SteamLibrary\steamapps\downloading\1795570\AgroundZero.exe

Was fixing to do another play through b4 release, still might. still might

[David Maletz]

The !ml means that is was detected by machine learning, and is absolutely a false positive for Aground Zero. I *think* if you update your virus definitions (this happens during windows updates), this error will go away (it did for me) - but if it still persists, let me know and I can submit a false positive report to windows. You can also add Aground Zero as an exception to windows defender.

[Ratzfaz]

Bought the Game today. Startet the Game, played 75 mins and closed the Game. Now if i start the Game, it complains about a missing Aground.exe. next try to start it, windows complain about a virus issue. next start missing exe again.

[David Maletz]

Try updating your windows/windows defender definitions. This was a false positive that was removed a while ago. According to the current definitions on windows defender, Aground Zero is not flagged as a virus (I just checked). If you have a different antivirus making the error, let me know more details.

[Ratzfaz]

I have added Aground Zero as an exception to windows defender. Last Update windows defender was todayfew hours after my comment. Now i have removed the exception and it works fine. THX
It's always a bad feeling if u need an exception in the virus scanner....

[David Maletz]

Yeah, I was quite horrified when I heard someone say it was flagged as a virus. The !ml detections are machine learning, which means there's not even any way to say why it flagged Aground Zero. But, when I reported it to Microsoft and they checked the file, they updated the definitions so that Aground Zero wasn't incorrectly flagged as a virus.