General My Anti-virus detected a malicious file in Opera GX

[leocg]

leocg Moderator Volunteer last edited by

General My Anti-virus detected a malicious file in Opera GX

[KAR4TASH]

KAR4TASH last edited by leocg

What the hell is this?

[leocg]

leocg Moderator Volunteer @KAR4TASH last edited by

@kar4tash For some reason, your antivírus thinks that something from a page you've visited is malicious.

[RirichiyoZ]

RirichiyoZ @KAR4TASH last edited by

@kar4tash Same problem here. It only happens when I try to access Twitch

[beeda2004]

beeda2004 @RirichiyoZ last edited by leocg

@ririchiyoz had similar problem only different named virus

same when i tried to open twitch

[burnout426]

burnout426 Volunteer last edited by burnout426

It's most likely a false positive cause by Windows Defender's heuristics. Some users of other browsers are seeing it when visiting twitch.tv also.

However, if you have any Twitch extensions at the URL opera://extensions, especially Twitch adblocking extensions, remove them and see if the alerts go away. Read somewhere that someone recently bought a Twitch adblocking browser extension from something and the new developer started putting malicious code in it. Something to research.

[RirichiyoZ]

RirichiyoZ @burnout426 last edited by

@burnout426 thanks for the tip, but unfortunately the problem persists only in Opera GX. I removed all the extensions I had (none were Twitch related), cleared the cache, reinstalled.. and nothing worked. I tested it on Edge and Chrome and didn't face any problems.

[burnout426]

burnout426 Volunteer @RirichiyoZ last edited by

@ririchiyoz Using Opera's adblocker and tracking protection with any custom lists?

[RirichiyoZ]

RirichiyoZ @burnout426 last edited by

@burnout426 Neither. I disabled everything possible in Opera GX to see if the problem persisted, and unfortunately it didn't help. I never had this problem. It started yesterday. I stopped using Opera in the meantime

[stevewright 0]

stevewright 0 @RirichiyoZ last edited by

@ririchiyoz Tested the installer on VirusTotal today and got this

Cylance Unsafe
Malwarebytes Malware.Heuristic.1003
Trapmine Malicious.high.ml.score

Here's the link: https://www.virustotal.com/gui/file/4ca55ecbf81a932ba8947f526fc94c4ee2dbbb9e8e76215210a24d4d509a4ca3?nocache=1

[sgunhouse]

sgunhouse Moderator Volunteer @stevewright 0 last edited by sgunhouse

@stevewright-0 High ml score? Anything that says Heuristic is automatically suspect - they are saying it looks similar to malware but it isn't any particular one.