Jump to content

Photo

Mod organizer installer - WS.Malware.1


  • Please log in to reply
11 replies to this topic

#1
seweryn

seweryn

    Old hand

  • Supporter
  • PipPipPip
  • 619 posts
So i wanted to download MO installer from skyrim nexus and i got this warning from my norton 360. WS.Malware.1 A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer. Anyone knows what is going on ? Thanks for the info,

#2
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts

So i wanted to download MO installer from skyrim nexus and i got this warning from my norton 360. WS.Malware.1 A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer. Anyone knows what is going on ? Thanks for the info,

Post version and link here.

 

Upload what you got here: (https://www.virustotal.com/en/)

 

Verify it's not a false positive first, because it is an exe? here ,add ware may have gotten hold of it.


Edited by Purr4me, 31 January 2017 - 09:55 AM.


#3
seweryn

seweryn

    Old hand

  • Supporter
  • PipPipPip
  • 619 posts

 

So i wanted to download MO installer from skyrim nexus and i got this warning from my norton 360. WS.Malware.1 A file flagged by this detection name is deemed by Symantec to be an unclassified malicious threat and is therefore blocked from accessing the computer. Anyone knows what is going on ? Thanks for the info,

Post version and link here.

 

 

Version 1.3.11

Name and link  Mod Organizer v1_3_11 installer

Here you go
 



#4
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts
https://www.virustot...sis/1485856955/

#5
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts

(https://threatinfo.n...l-as-malicious/)

Advice: report the file ,could have been tampered with.



#6
seweryn

seweryn

    Old hand

  • Supporter
  • PipPipPip
  • 619 posts

(https://threatinfo.n...l-as-malicious/)

Advice: report the file ,could have been tampered with.

Already did checked both manual instalation and installer, links are clean but files itself can be infected. I already reported the issue.



#7
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts

My first copy does not show as infected, the current file online does, so I can only think something has changed.

Choose a lessor version.



#8
MistakenMystic

MistakenMystic

    Faithful poster

  • Supporter
  • PipPipPipPip
  • 1,515 posts

This is a link to the report for the file when @Tannin first uploaded it and this is a report of the current file.

 

As you can see in both reports Virustotal is advising:  Probably harmless! There are strong indicators suggesting that this file is safe to use.

 

While it may be possible the current upload has somehow been tampered with, the more likely scenario is the scanner that is reporting malicious code is not accurately reporting and is confusing some of MO's 'hooking' code as harmful.

Baidu may be one of China's largest companies but that doesn't mean they have the best AV software avaiable



#9
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts
https://www.virustot...sis/1485898658/

To err on the side of caution is a hell of a lot better and proceeding blindly

#10
Purr4me

Purr4me

    Mystic Arts

  • Members
  • PipPipPipPipPip
  • 9,348 posts

I am gonna check on the archived packages just to be sure.

 

Nexus users have Good friends here.






IPB skins by Skinbox
Page loaded in: 1.056 seconds