gamepanel.exe / wuauclt.exe detected as malware

Viruses and worms
1

Hi,

I’m a bit confused about the following. Since a few days Avast is reporting a Malware kit being blocked.

Object:
C:\WINDOWS\SoftwareDistribution\Download\9f24bc49f22b4a2eda1267a5c08b0903\amd64_Microsoft-Windows-Client-Features-WOW64-PackageAMD6410.0.17134.1\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.17134.1_none_2e8b005bc4dbb92d\gamepanel.exe

Infection: Win32:MalOb-CA (Cryp)
Action: Moved to vault
Process: C:\Windows\System32\wuauclt.exe

Personally I think this is a false positive as wuauclt.exe is a part of Windows Update and I don’t visit exotic sites, nor do I click links in weird mails or somthing.

Before I report as a false positive I just wanted to check things with you guys and girls over here. Can some good soul give me some more info on this?

Kind regards

2

Hi
im already have the same issue in my organization i guess is a false positive.
this is happend when windows is trying to do Windows 10 Update 1803.

any update on this?

3

You can report a suspected FP (File/Website) here: https://www.avast.com/false-positive-file-form.php