False positive - Legitmate installer/game launcher "Generic.Ml"

quicksnooker — Tue, 25 Jun 2019 13:49:15 GMT

https://www.virustotal.com/gui/file/cb9643dd7796807339ad294842b905b5a7698b67b60ee1ef9d9eda769f2accee/detection

"Generic.Ml"

Distribution URL is http://cloud.quicksnooker.com/qsLaunch3.exe

Hi

I am the author of this program - which is the legitimate launcher/installer for Quick Snooker - an on-line Snooker game, running for nearly 20 years and with 100,000+ installs.

The summary on the (VirusTotal) 'behavior' tab is accurate - the program makes no attempt to disguise what is does.
It downloads a location from quicksnooker.com, and then downloads and unzip files from http://cloud.quicksnooker.com (our content delivery network hosted in the 'google cloud'.)
The files containing the main executable QuickSnooker.exe, and a set of resources (images, textures, sound and geometry files).
The program also creates a folder (%LocalAppdata%\qs8) , a desktop shortcut, and the appropriate registry keys to uninstall Quick Snooker program when requested.

Of course it *looks* very Trojan like - but it is harmless and complies with industry standard clean guidelines.

See our terms or help sections at http://quicksnooker.com

Please remove ASAP

Hopefully your "ML" will be smart about future versions ?

thanks in advance

Nick Axworthy

Re: False positive - Legitmate installer/game launcher "Generic.Ml"

dparris — Fri, 12 Jul 2019 16:58:55 GMT

I have entered this file for further analysis

topic False positive - Legitmate installer/game launcher "Generic.Ml" in VirusTotal

False positive - Legitmate installer/game launcher "Generic.Ml"

Re: False positive - Legitmate installer/game launcher "Generic.Ml"