False Postive: HomeworldRM.exe

Greetings Avast,

The remastered game HomeWorld has just launched on steam, Upon opening the game’s beta multiplayer module Avast’s FileRep system detected HomeworlddRM as a piece of malware.

Here’s a Virustotal scan of the HomeworldRM.exe file.

https://www.virustotal.com/en/file/afa05759a2107ccd05dcc241ffd1d073d7e61005b6b56b1c692853f2841a46cf/analysis/1424900363/

I have reported the program as a false postive to the virus lab via the upload utility however I wanted to also raise the False Postive in public in-case anyone else whom is running home world gets a message about the virus threat.

The Filerep Block signature is normally used when a file hasn’t been downloaded enough times. It’s a safe guard to protect against malware. Other vendors are wrongly reporting that the file is malware. This is a false postive with 100% certainty. The game was developed and published by Gearbox Software the original PC port developers behind Halo and more recently Boardlands and Duke Nukem Forever (along with A:CM)

No need to post something that is already known:
https://forum.avast.com/index.php?topic=166889.msg1187728#msg1187728

Hi Oliver,

What is Metascan Online scan results reporting for that download link. Any bundling PUP adware?
FP reaction for detection here: https://steamcommunity.com/app/274920/discussions/0/613941122633134304/?l=dutch
Here you see the detection ratio for that type of alleged adware malcode: http://support.clean-mx.de/clean-mx/viruses.php?virusname=W32/FakeAlert.FY.gen!Eldorado&sort=id%20desc
It is a so-called RFC1156 heuristical detection (specifies the contact name, the physical location, and the SNMP services for the computer).
Adware here is meant by any software package which automatically plays, displays, or downloads advertisements to a computer.
Here it was a FP detection: https://devtalk.nvidia.com/default/topic/542969/having-trouble-installing-the-tadp-2r2/

Damian