The pattern of 'TR/AD.Swrort.gedwq [trojan]' detected in file 'GalaxyClient\Games\Gwent\unins000.exe. Action performed: Move file to quarantine

I am just getting lots and lots of such a warnings. All of them concern unins000.exe files of various gog games. What to do?

Best thing to do is not using a crappy anti virus program or simply ignore everything GOG related with Avira.

I did that with Kaspersky. Named the excluded folder “Good Old Viruses” ;). Cheers

tbh upload the file to virustotal as it scans using alot of AV engines, if software like eset,kaspersky dnt detect it but stuff like avast,avira,dr web and other trash software does its considered a false positive, free antiviruses tend to always reveal false positves making u think its actially working , with an AV i use comodo cloud antivirus, dnt have the money for paid ones

Apparently the basic GoG Uninstaller app seems to contain a sequence of bytes which your AV software finds dangerous. That is often the problem when there are thousands of viruses and one wants AV software to be able to scan quickly thus defining these viruses in as few bytes as possible. Sometimes innocent software gets caught in the crossfire.

Contact Support and tell them and I'm sure they will say ''false positives''and you will also find a decent virus detector will say all is okay. Get away from using free stuff, protecting your pc.

If the option is there to send them the file when it's quarantined, do so and they can hopefully do another analysis on it to recognize it as a false positive and remove it from their definitions when they push another update.

What game specifically? I have Avira and not had this with any of my games. I don’t use galaxy, that could be one possibility, but if you mention a game or two I can try if I own it.

It's completely a false positive as others have said. The thing is, GOG wouldn't be in business very long if they are putting real viruses and trojans in the games. As not only would it be affecting customers, it would also be meddling with the game files in a way that the developers and publishers never agreed to.

Did find the same warning message from Avira. The game in my case is Pathfinder Kingmaker.

Well, it’s possible. There appears to have been a patch in september which may have broken it. I actually played this earlier this year, standard downloaded files no galaxy, with avira, no issues at all. Are you using galaxy? I can try it in a bit on my machine and get back.

The correct thing to do is to get rid of Avira or any other third party snake oil.

So, just installed Pathfinder - I have only 2.0m - scanned unis000.exe, no problems. Its possible that later patches may have changed that of course, I haven't time to download the latest 30gb version. Or it could be galaxy. As mentioned, if there are any specific games, I can check the version I have. I don't use galaxy, hence have not gwent.

Has there been a recent update of Galaxy or Pathfinder Kingmaker? (with recent I mean yesterday or today) Because I got the game on my oc for at least two weeks now and this is the first time the unins000.exe was adressed by Avira as containing a trojan.