It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
No posts in this topic were marked as the solution yet. If you can help, add your reply
high rated
Best thing to do is not using a crappy anti virus program or simply ignore everything GOG related with Avira.
Some antivirus software get a bit too zealous with false positives. They must not have "whitelisted" or been exposed enough to GOG games. Avast is another known offender.

Adding an exception to my GOG games folder stopped this problem for me.
Post edited November 19, 2019 by ConsulCaesar
avatar
ConsulCaesar: Some antivirus software get a bit too zealous with false positives. They must not have "whitelisted" or been exposed enough to GOG games. Avast is another known offender.

Adding an exception to my GOG games folder stopped this problem for me.
I did that with Kaspersky. Named the excluded folder “Good Old Viruses” ;). Cheers
tbh upload the file to virustotal as it scans using alot of AV engines, if software like eset,kaspersky dnt detect it but stuff like avast,avira,dr web and other trash software does its considered a false positive, free antiviruses tend to always reveal false positves making u think its actially working , with an AV i use comodo cloud antivirus, dnt have the money for paid ones
Apparently the basic GoG Uninstaller app seems to contain a sequence of bytes which your AV software finds dangerous. That is often the problem when there are thousands of viruses and one wants AV software to be able to scan quickly thus defining these viruses in as few bytes as possible. Sometimes innocent software gets caught in the crossfire.
Contact Support and tell them and I'm sure they will say ''false positives''and you will also find a decent virus detector will say all is okay. Get away from using free stuff, protecting your pc.
If the option is there to send them the file when it's quarantined, do so and they can hopefully do another analysis on it to recognize it as a false positive and remove it from their definitions when they push another update.
avatar
Leszek38: The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.
It's completely a false positive as others have said. The thing is, GOG wouldn't be in business very long if they are putting real viruses and trojans in the games. As not only would it be affecting customers, it would also be meddling with the game files in a way that the developers and publishers never agreed to.
avatar
Leszek38: The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
avatar
nightcraw1er.488: What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.
Did find the same warning message from Avira. The game in my case is Pathfinder Kingmaker.
avatar
nightcraw1er.488: What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.
avatar
BlueInMotion: Did find the same warning message from Avira. The game in my case is Pathfinder Kingmaker.
Well, it’s possible. There appears to have been a patch in september which may have broken it. I actually played this earlier this year, standard downloaded files no galaxy, with avira, no issues at all. Are you using galaxy? I can try it in a bit on my machine and get back.
The correct thing to do is to get rid of Avira or any other third party snake oil.
Post edited November 19, 2019 by Randalator
avatar
nightcraw1er.488: What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.
avatar
BlueInMotion: Did find the same warning message from Avira. The game in my case is Pathfinder Kingmaker.
So, just installed Pathfinder - I have only 2.0m - scanned unis000.exe, no problems. Its possible that later patches may have changed that of course, I haven't time to download the latest 30gb version. Or it could be galaxy.
avatar
Leszek38: The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
As mentioned, if there are any specific games, I can check the version I have. I don't use galaxy, hence have not gwent.
Post edited November 19, 2019 by nightcraw1er.488
avatar
BlueInMotion: Did find the same warning message from Avira. The game in my case is Pathfinder Kingmaker.
avatar
nightcraw1er.488: So, just installed Pathfinder - I have only 2.0m - scanned unis000.exe, no problems. Its possible that later patches may have changed that of course, I haven't time to download the latest 30gb version. Or it could be galaxy.
avatar
Leszek38: The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?
avatar
nightcraw1er.488: As mentioned, if there are any specific games, I can check the version I have. I don't use galaxy, hence have not gwent.
Has there been a recent update of Galaxy or Pathfinder Kingmaker? (with recent I mean yesterday or today) Because I got the game on my oc for at least two weeks now and this is the first time the unins000.exe was adressed by Avira as containing a trojan.