New update nms.exe infected with Trojan

[paulrgod]

Anyone else seeing this? NMS.exe Executable quarantined Sabsik.FL.B!ml

Anyone else?

[Saiph]

It's 99.9% certain to be a false alarm. What AV are you using?

[Zak]

Nope. What antivirus are you using? It's either false-positive or you already have been infected before and it attached itself to nms.exe. Most likely a false-positive though.

[Musashi]

BS

[paulrgod]

Just Windows defender. Never seen this flag up. I've deleted and reinstalled the game fully and still the same.

[Prescient Stones]

Originally posted by paulrgod:

Just Windows defender. Never seen this flag up. I've deleted and reinstalled the game fully and still the same.

Legit Steam Version?

[SumGumption]

Is there a chance this file you speak of came from a MOD?

[paulrgod]

Yeah absolutely legit version, no mods.

I've allowed it hoping it's a false positive. Never seen this from a Steam download.

[Jaggid Edje]

No alert here, but I use a 3rd party AV solution, not Windows Defender. Odds are it is a false positive and Windows Defender just needs to update their definitions. It wouldn't be the first time[www.windowscentral.com] Windows Defender had false positives on perfectly safe software.

That said, the rest of us do not know what specifically is happening on your particular computer, so you may want to be safe and check the file with a few other AV scanners. You can do this via the web, running it through several different AV scanners, all without owning or installing them.

[Musashi]

You can even do a full scan with win defender ... and my defender never gave me a false positiv

[Krash Megiddo]

I would whitelist it since you know its legit.

[Prescient Stones]

Originally posted by paulrgod:

Yeah absolutely legit version, no mods.

I've allowed it hoping it's a false positive. Never seen this from a Steam download.

Defender on my pc on the single file turned up clean.
VirusTotals on the web tuned up nada.
https://www.virustotal.com/gui/file/6a8f4edf28c395a52120a6343c4521b83bc5a1fe4fdc537513ddee2dbf39cb98?nocache=1

Implbits to give you a File Hash tab on the Properties popup via Windows.
https://implbits.com/

[paulrgod]

Yeah thanks for the advice guys, whitelisted and all working. No other alerts.

[Geldric™]

https://www.youtube.com/watch?v=V0feR5grSa4

[Zak]

Yeah, Windows Defender often blocks legit Windows processes and known apps from working, but I have all advanced security settings enabled, including ransomware protection which is super sensitive. But it never happened to NMS though.

[Zak]

Originally posted by Geldric:

https://www.youtube.com/watch?v=V0feR5grSa4

LOL, lost count how many times I had to clean up malware from Macs. There are no viruses per se, but socially engineered phishing and trojans are alive and well on mac OS :) But yeah, you have to be really careless to get something, but many Mac users are overconfident in their security and will happily click on a link an type their password when asked :)