McAfee Keeps Quarantining Game

[Stynger]

How do I fix this?

[Rebellion Community]

You should be able to add the game's .exe to a list of exceptions in McAfee.

[Stynger]

I got if figured out. Thank you for the response!

[Leper Messiah]

I've still got this issue and have only been able to start game briefly since last patch was issued.

Please can somebody help me as I'm going round in circles and getting mightily pissed off.

[Ianosei]

Stynger, how did you get it figured out? I have the same issue on my son's PC.

First I purchased it for myself. I share my games with him (steam functionality). If he likes it, epecially if there is multiplay. coop. or what not. and I think we could play together, I may get him a copy. This is what I did.

So, he first had the software installed from my share. I then purchased him his own copy. The software was already install from my share, and we tried to run it. Mcafee quaranteed the executable as it tired to run.

I uninstalled via steam and reinstalled. Same. I uninstalled again and manually removed anything in the game directory then reinstalled. Same problem.

I've scanned the entire machine for the viruses. Nothing.

What I don't know if the problem is do to something in the registry data nor is that anything I want to be playing around with. I only suspect it due to the part where it was first installed as a share with my license and now that he has his own, it's confused somehow. I don't know.

My next attempt will be to copy the one executable file from my laptop to my son's desktop. If it fails, then its not the file because my file is clean. If it works, then the download itself... is that infected?

Some techical support would be appricated. All I know is I'm glad I'm not alone on this issue though sorry, I don't mean to wish frustration on anyway.

[~]

What does Mcafee log the Virus as [] ? if you shared the game it would have the same ID if you went online and ? not work, surely the shared software would need to be completely removed before installing the purchased software for the PC , an exemption can be made in the AV for the exe like Rebellion said but has your son used a Trainer as this would flag a Trojan or Virus , i have seen this before, Trainers can trigger false posatives and or have some kind of trojan

[Ianosei]

McAfee labeled it "JTI/Suspect!65760" as the virus and yes I understand the concern related to a removal of a copy previously shared though I have shared other software, then purchased my son (or he has) his own copy and ran a copy without removing the shared version without any compliants by the system. But, who knows. It's why I mentioned the registry though. Either way, if removal is required, the uninstall should have taken care of it so a new install would not fail. If it did not and that IS the problem, there is a defect in the uninstall. Somewhere there is a problem for sure.

That said, I did try copying the two files McAfee originally complained about. Why there were 2 due to 2 different (3 total) uninstalls, I don't know. The files were SniperElite4.exe and SniperElite4_DX11.exe. One in the bin directory, the other in the launcher directory. After phyically removing the quaranteed files and replacing them with the fresh, clean ones (yes, scanned before using), upon starting, the D11 file was flagged as infected. I guess this leads back to perhaps a registry that is producing the problem?

[~]

Publicado originalmente por Ianosei:

McAfee labeled it "JTI/Suspect!65760" as the virus and yes I understand the concern related to a removal of a copy previously shared though I have shared other software, then purchased my son (or he has) his own copy and ran a copy without removing the shared version without any compliants by the system. But, who knows. It's why I mentioned the registry though. Either way, if removal is required, the uninstall should have taken care of it so a new install would not fail. If it did not and that IS the problem, there is a defect in the uninstall. Somewhere there is a problem for sure.

That said, I did try copying the two files McAfee originally complained about. Why there were 2 due to 2 different (3 total) uninstalls, I don't know. The files were SniperElite4.exe and SniperElite4_DX11.exe. One in the bin directory, the other in the launcher directory. After phyically removing the quaranteed files and replacing them with the fresh, clean ones (yes, scanned before using), upon starting, the D11 file was flagged as infected. I guess this leads back to perhaps a registry that is producing the problem?

Google searched JTI/Suspect!65760
result
https://www.howtouninstallmalware.org/how-to-remove-jtisuspect65750-trojan-worm-completely-from-computer
This is obviously recomending Spy Hunter to remove it , if this is what you have got.
You can try Malware Bytes , i have the subscribe version or the best imo Bitdefender .
Mcafee should remove it , it detected it ., but here is the irony ok and i`am not accusing ok, this is a typical command line from Cheat Engine which i believe some use to make Trainers

SniperElite4_DX11.exe +1593E90 - 4C 8B 49 38 < -- = hacked code via cheat engine mov r9,[rcx+38]
The above is only a small part of text

i got all this off a google search from other posts on here concerning quarentined exe files.

personally i do not care if people use Trainers

[Ianosei]

Yes, I googled the same and SpyHunter will not remove it, only detect it. To remove you have to buy a copy. The post I read about it also went into a registry tool as well.

My problem is, the entire computer has been scanned now, deep scan not quick. Nothing is reporting sour but SniperElite4. Why?

The only explaination I can dream up is something left over in the registry from when my version was run on that computer in share mode, to now when he has his own copy. I'm guessing of course. If this is the case though Rebellion or Steam has a defect that needs fixing.

So far, Rebellion has not responded to my support ticket openned.

[~]

Publicado originalmente por Ianosei:

Yes, I googled the same and SpyHunter will not remove it, only detect it. To remove you have to buy a copy. The post I read about it also went into a registry tool as well.

My problem is, the entire computer has been scanned now, deep scan not quick. Nothing is reporting sour but SniperElite4. Why?

The only explaination I can dream up is something left over in the registry from when my version was run on that computer in share mode, to now when he has his own copy. I'm guessing of course. If this is the case though Rebellion or Steam has a defect that needs fixing.

So far, Rebellion has not responded to my support ticket openned.

Rebellion or Steam file infected i doubt very much, if that was the case ? surely lots more would have it.
The thing is ? Laptop is clean PC is not .
The "JTI/Suspect!65760" was found on a google search and your AV should get rid of it.
But imo you may have that Trojan and a false posative flag by using a Trainer as well ?

[Leper Messiah]

solved my issue by exempting the exe file in McAfee - installed and scanned Spybot and scanned twice with no virus/trojan found yet McAfee keeps flagging it in the dx12 exe

[~]

Publicado originalmente por Leper Messiah:

solved my issue by exempting the exe file in McAfee - installed and scanned Spybot and scanned twice with no virus/trojan found yet McAfee keeps flagging it in the dx12 exe

Whats the name of the virus that is flagged

[Leper Messiah]

same one - JTI/Suspect!65760

[~]

Publicado originalmente por Leper Messiah:

same one - JTI/Suspect!65760

? Do you think then that this is a Flase Posative by Mcafee and is this just bull to get people to buy
https://www.howtouninstallmalware.org/how-to-remove-jtisuspect65750-trojan-worm-completely-from-computer
sure is a weird one

[Leper Messiah]

who knows? - first time I've bought via Green Man Gaming and not Steam - if it happens again with the new Ghost Recon - I'll be taking it up with GGG

[~]

Publicado originalmente por Leper Messiah:

who knows? - first time I've bought via Green Man Gaming and not Steam - if it happens again with the new Ghost Recon - I'll be taking it up with GGG

? But GGG only gives you the activation Key to download ? via Steam , i use gamersgate , get the key then activate via steam