Malware in the update

[Tripfy]

I keep getting Malware detection while updating the game today by the Antivirus and this is the only game where it has happened so far.
"saber_symstore.exe" was infected with "Win64:Malware-gen"
Not sure if it'll let me post a picture link here: https://i.imgur.com/48rQEFF.png

[Gronkar]

I got the same. False positive maybe? Now my game won't update. :( Someone with tech knowledge should look into it XD

[Dark Angel]

Same here :(

[IRON Brother Hereticus]

same, everytime i pause my update it reset to the beginning......

[Stevey]

I marked it as a false positive, went into Avast quarantine and restored the file, then the update continued for me.

[Clutch9000]

there is another post about this. I and others deleted saber_symstore.exe and the game still runs fine.

[[VI] Vaderoth Ormbiten]

Marked it as a False positive, restored the file and again my AV kept putting the file in quarantine. Preventing the full download.

To Fix I had to restore the file after it was quarantined "While" the download was happening for it to recognise the file was still there. So it didn't make a new iteration of it, which would instantly be quarantined preventing the complete update. . . This was a pain in the ass. . .

Once the Update is done the file that caused the issue is irrelevant

[fccmail54]

Yes, my AV (a different vendor) has identified it too. Surprised and worried that different AV vendors are both identifying it as the same malware.

[SkyLynx]

Same here. Reported as false positive.

[IRON Brother Hereticus]

i think the only solution is for me to donwload it in one go , otherwise it will restart again

[b-laiskiainen]

Well, this is nice. Apparently this is why my update keeps failing and now I'm downloading for the THIRD time today, because download cache was emptied automatically this time...

Saber in a rush much?

[Akuma_Angelus]

Hopefully this will help ease some minds.

"SymStore (symstore.exe) is a tool for creating symbol stores. It is included in the Debugging Tools for Windows package."

Saber Interactive is the company that made SM2. "Saber" is added likely so Windows can tell the difference between the native version of Symstore and The Saber Interactive version.

The only fix I can think of is figuring out how you can add the file to an exceptions list in your AV. If you're using AVG or avast as AV, I've heard they're prone to flagging false positives, mainly things that modify an .exe. Frankly Windows Defender is quite adequate now a days. I'm a little paranoid so I also use Malwarebytes as a double check scan.