Gunzta

Thank you itman, I really appreciate you taking the time to explain and educate me. I have followed your instructions. Although I note that upc.exe is no longer causing an issue and is scanning without problems. (as per cyberhash's post) Its just the RidersRepublic.exe that is getting falsley identified so I have submitted it. cyberhash: thank you for your additional info, very helpful.

Thank you for the information. As a normal user that doesn't speak fluent Malware, could you possibly hold my hand a little more and walk me through your reply in language that I might understand? Probably a more pressing issue than understanding what you said, is knowing when ESET will let me play my game again?

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 07/10/2023 09:16:53;Real-time file system protection;file;G:\Ubisoft\RidersRepublic\uplay_download\5487\RidersRepublic.exe;a variant of Win64/GenKryptik_AGen.KR trojan;cleaned by deleting;3900X-ADZ\xxxxx;Event occurred on a file modified by the application: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe (2075EB977C83F9E2A499BC3B7324E39F96B8DE95).;FE5B8E0C281975124C4CD94A48144A791C274240;07/10/2023 09:16:42 Any advice please?

Hi. ESET is flagging and deleting a UbiSoft game executable again. I've highlighted this issue before (link below) . Apparently the exe for Riders Republic has been updated and is now being falsely detected again. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 15/01/2023 21:09:28;Real-time file system protection;file;G:\Ubisoft\RidersRepublic\uplay_download\5487\RidersRepublic.exe;a variant of Win64/Packed.VMProtect.L suspicious application;cleaned by deleting;3900X-ADZ\adamp;Event occurred on a file modified by the application: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe (8591E4446BC0414C53EEC88464D1CDBE85832BB7).;AA5E32DCA2F05109ABB72109DB95306BEA58BE03;18/12/2022 19:44:14 @Marcos jumped on this for me before and it was resolved very quickly.

The game was released a few months ago (28 October 2021), and while it would be common place to include DRM like Denuvo at launch, its not unusual for many developers to removed once the launch window has passed (there are examples of this happening). I find it odd that it would be added now, 3 months after launch. Not saying you are wrong, just that I find it strange. I'll wait for ESET to address the issue with an update. I'm sure it won't be long.

Hi Marcos. Thanks for quick response. First contact: Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 10/02/2022 22:00:03;Real-time file system protection;file;G:\Ubisoft\RidersRepublic\uplay_download\5487\RidersRepublic.exe;a variant of Win64/Packed.VMProtect.L suspicious application;cleaned by deleting;3900X-ADZ\adamp;Event occurred on a file modified by the application: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe (CDE3BDCF2E20035E78FA48639A1C434347D9ADCE).;8576EDA22EB13746C47F2ACF7CF4A27546E39422;10/02/2022 21:59:59 And this is a retry of the above because the game update failed as a result of this. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here 10/02/2022 22:13:47;Real-time file system protection;file;G:\Ubisoft\RidersRepublic\uplay_download\5487\RidersRepublic.exe;a variant of Win64/Packed.VMProtect.L suspicious application;cleaned by deleting;3900X-ADZ\adamp;Event occurred on a file modified by the application: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe (CDE3BDCF2E20035E78FA48639A1C434347D9ADCE).;ABFB33960541725E9A6A112E1FB38CF8BC40B9B8;10/02/2022 22:13:43 I am currently unable to play/launch the game.

I too have just had this happen on 2 different PC's. Updating a Ubisoft game called Riders Republic last night both mine and missus PC both had ESET flag the main exe and delete it. Please advise