Osu! is being detected as [UDS:Trojan.Multi.GenericML.xnet Precision: Exactly]

[Devscape]

Osu is being detected as a virus. I’m not sure how.

 

[Devscape]

Event: Malicious object detected
User: DESKTOP-B2OPRRN\rtgge
User type: Active user
Application name: osu!.exe
Application path: C:\Users\rtgge\Downloads\osu!
Component: AMSI Protection
Result description: Detected
Type: Trojan
Name: UDS:Trojan.Multi.GenericML.xnet
Precision: Exactly
Threat level: High
Object type: File
Object name: amsi_stream_50
Object path: uid://
MD5: DE300171C3B2F4B98F7BFCE1B21AD5F4
Reason: Cloud Protection

[Berny]

@Devscape Welcome.

Please upload the object here :

https://opentip.kaspersky.com/DE300171C3B2F4B98F7BFCE1B21AD5F4/  and ask for “Reanalyze.

[Devscape]

@Devscape Welcome.

Please upload the object here :

https://opentip.kaspersky.com/DE300171C3B2F4B98F7BFCE1B21AD5F4/  and ask for “Reanalyze.

I’ve uploaded it ^^

Edit: I’m zipping up the entire file and sending it for better analysis.

[Devscape]

My file for osu is too large. Can I send it anywhere else?

[nof0715]

My file for osu is too large. Can I send it anywhere else?

Try packing everything but beatmaps, I’m having the same issue and that’s what I did, still getting positives after reinstalling from the official webpage so… 

[Devscape]

My file for osu is too large. Can I send it anywhere else?

Try packing everything but beatmaps, I’m having the same issue and that’s what I did, still getting positives after reinstalling from the official webpage so… 

Good to know I’m not the only one with this problem- I’ll do that.

[nof0715]

What I seem to have noticed is that the MD5 Hash of the detected file and the .exe file on the osu! directory is not the same, I don’t know what could it be though

 

 

[Devscape]

What I seem to have noticed is that the MD5 Hash of the detected file and the .exe file on the osu! directory is not the same, I don’t know what could it be though

 

 

Same here. The MD5 part is consistent, but the exe has a different one. Maybe it has something to do with some new bug definitions, since I only noticed it happening today.

[Artifax12]

Can I go back to clicking circles pls. Am having this issue as well, and it’s pissing me off. Kaspersky rarely flares up with p2p and scene releases, and now it’s blocking an online rhythm game played by millions of people >:( 

 

The worst part is that I can’t even exclude it. I added it to trusted apps, excluded it from scan, and it’s still hanging every time I try to play. Kaspersky doesn’t even notify that it’s the one blocking the game. Pls fix before I jump ship to malwarebytes or something

 

 

[DaveKansas]

Please fix this

 

[Devscape]

Please fix this

 

Same here, I excluded the entire osu folder from my scans and it still comes up.

[AccelNY]

 

Also having this issue, wasn’t happening a couple of days ago.

The Osu app freezes in the first couple of minutes 100% of the time.

 

[Artifax12]

Guys I found a solution. Just disable AMSI protection in the settings. Please note that I have osu.exe in my trusted applications and “exclusions” as well. 

 

Add by Admin:

 

This was a false alarm.
It will be corrected.

[cryborg]

where does this file come from? it’s not the one given in the report.

MD5: DE300171C3B2F4B98F7BFCE1B21AD5F4

 

the ones on disk have different hashes:

9989CA0FB9E519BA0D10CDC6DC56972D *osu!.exe

4B2739AFE4E82673757FF8251D9F4F23 *_pending\osu!.exe

 

[Danila T.]

Hello,

 

This was a false alarm.
It will be corrected.