It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
Community
AutomachefWindows Defender detected Trojan:Script/Oneeva.A!ml(2 posts)(2 posts)
(2 posts)
Pages:
1
This is my favourite topic
Posted August 07, 2019
I installed the game from setup_automachef_1.0_(64bit)_(31093).exe which I downloaded from my GOG account page.

The game installed fine, but when I tried to play it, Windows Defender anti-virus stopped the game from running and showed me this message:

Trojan:Script/Oneeva.A!ml

Detected in:
startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Automachef [GOG.com]\Automachef.lnk
file: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Automachef [GOG.com]\Automachef.lnk
file: D:\GOG\Automachef\Automachef.exe

Is this a false positive?
Attachments:
20190807175643.png (24 Kb)
No posts in this topic were marked as the solution yet. If you can help, add your reply
Posted September 19, 2019
avatar
CalAlaera: I installed the game from setup_automachef_1.0_(64bit)_(31093).exe which I downloaded from my GOG account page.

The game installed fine, but when I tried to play it, Windows Defender anti-virus stopped the game from running and showed me this message:

Trojan:Script/Oneeva.A!ml

Detected in:
startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Automachef [GOG.com]\Automachef.lnk
file: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\Automachef [GOG.com]\Automachef.lnk
file: D:\GOG\Automachef\Automachef.exe

Is this a false positive?
Hi there

Since there is no reply to your question yet, I though I quickly register to give you some info :)
I suggest you upload the detected file to https://www.virustotal.com/gui/home/upload
That will give you an idea if its just a false positive from MS Defender, of if there is other vendors who detect it as malicious.

I never downloaded anything from this site, hence I can't say whether the site might be compromised or how the downloads even work. At least the domain does not seem to be on any blacklist.
If the software comes with an installer, that might be the reason some AV solutions give you alerts, as those installers sometimes come bundled with adware/PUA.

If you nedd help with the analysis you can PM me on my twitter account: https://twitter.com/PO3T1985

Cheers
P.
Pages:
1
This is my favourite topic
Community
AutomachefWindows Defender detected Trojan:Script/Oneeva.A!ml(2 posts)(2 posts)
(2 posts)