Jump to content

ESET Blocks Genshin Impact exe file, Why?


Replaz
Go to solution Solved by Marcos,

Recommended Posts

ESET recently started deleting the game's executable. This happens after the download from the official launcher is complete. Why?

File:

B:\Genshin Impact\Genshin Impact game\GenshinImpact.exe
B:\Genshin Impact\Genshin Impact game\GenshinImpact.exe_tmp

Hash:
C45912F493AA8C22C78944EF5B2248AF7A72A9C1

Detected by ESET LiveGuard.

An event occurred in a new file created in the application: 
B:\Genshin Impact\7z.exe (E9F48BC8DB373A665CB29D45DF33EA4435CB3082)
B:\Genshin Impact\launcher.exe (CFFBD393546D9B0F408CC597226DEDF8E8065287)

An event occurred when the following application tried to access a file:
C:\Windows\System32\Taskmgr.exe (2FA92AF18B877319E660F8A152FAF386C33E2F3C)

(I tried to translate the basic information through a translator. My ESET is not in English.)

Link to comment
Share on other sites

This is exactly the strangest thing. If check this file on virustotal or ESET, then it is clean. But later eset liveguard deletes it anyway without naming a specific reason.

Link to comment
Share on other sites

  • 1 month later...

This problem is happening again with the latest Genshin Impact update. Two files are being deleted during the download/installation process. Can you please help? I don't want to turn ESET off to be able to load the game. Thanks.

Link to comment
Share on other sites

  • Administrators
7 minutes ago, Joy145 said:

This problem is happening again with the latest Genshin Impact update. Two files are being deleted during the download/installation process. Can you please help? I don't want to turn ESET off to be able to load the game. Thanks.

Please provide logs collected with ESET Log Collector.

Link to comment
Share on other sites

Same here, ESET Liveguard deletes GenshinImpact.exe

"Time">30/03/2022 21:28:37
"Scanner">Real-time file system protection
"Object type">file
"Object">C:\Program Files\Genshin Impact\Genshin Impact game\GenshinImpact.exe</COLUMN>
"Detection">ESET LiveGuard
"Action">deleted
"Information">Event occurred during an attempt to access the file by the application: C:\Program Files\Genshin Impact\launcher.exe (A1EF38229456AD1B53FD077761306035475A6D19).
"Hash">00C84FE001AE89E862BC0E15931DE351777F42A0
"First seen here">16/03/2022 11:21:06
Link to comment
Share on other sites

  • Administrators

I've reported it to the appropriate team. The reason for detection by LiveGuard is the use of VMProtect plus some other conditions.

Link to comment
Share on other sites

  • Most Valued Members

Most probably it's about their AntiCheat , It's kernel's level anticheat

Link to comment
Share on other sites

  • 1 month later...
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...