Author Topic: Corona Mip Map triggering Win32/Sirefef!cfg warning from Windows Protection  (Read 1083 times)

2024-06-18, 14:19:15

John.McWaters

  • Active Users
  • **
  • Posts: 292
    • View Profile
    • JohnMcWaters.com
Whenever I open this 3dsMax file, as the file is opening, Windows Protections alerts me to a trojan "Win32/Sirefef!cfg" that is located in my Temp folder under CoronaRenderer>ImageTextureCache.

It always points me to a Corona_Mip_Map_8.data file located in one of the random folders under ImageTextureCache. I will tell it to remove the file, and sure enough, if I navigate to that folder, the Corona_Mip_Map_8.data file is gone.

I want to figure out what is causing this. It seems something is happening before the trojan is detecting that is creating it I the Temp folder in the first place. Is there a way I can look at what the contents are in the Mip Map folder and know if there is a texture file that is infected?

2024-06-18, 14:31:52
Reply #1

romullus

  • Global Moderator
  • Active Users
  • ****
  • Posts: 9277
  • Let's move this topic, shall we?
    • View Profile
    • My Models
This is false positive detection. It was reported here on the forum several times already by different users, including me. The file in question is being temporarily created by Corona's out of core textures feature. You can disable it if that false alarm is annoying you. Go to render setup>performance>performance settings and uncheck automated out of core textures. Keep in mind however that any older scene that was saved with out of core enabled, will have this feature on, so you'll have to uncheck it the next time you load an older scene, otherwise it will trigger Windows defender again.

To Corona team - would it be possible to contact Microsoft and some data about those out of core files, so they could adjust their detection code accordingly?
I'm not Corona Team member. Everything i say, is my personal opinion only.
My Models | My Videos | My Pictures

2024-06-18, 14:38:35
Reply #2

John.McWaters

  • Active Users
  • **
  • Posts: 292
    • View Profile
    • JohnMcWaters.com
This is false positive detection. It was reported here on the forum several times already by different users, including me. The file in question is being temporarily created by Corona's out of core textures feature. You can disable it if that false alarm is annoying you. Go to render setup>performance>performance settings and uncheck automated out of core textures. Keep in mind however that any older scene that was saved with out of core enabled, will have this feature on, so you'll have to uncheck it the next time you load an older scene, otherwise it will trigger Windows defender again.

To Corona team - would it be possible to contact Microsoft and some data about those out of core files, so they could adjust their detection code accordingly?

Ah, got it...so there is something about the file structure of the mip map this is causing a false positive from windows.