Corona Mip Map triggering Win32/Sirefef!cfg warning from Windows Protection

[John.McWaters]

Whenever I open this 3dsMax file, as the file is opening, Windows Protections alerts me to a trojan "Win32/Sirefef!cfg" that is located in my Temp folder under CoronaRenderer>ImageTextureCache.

It always points me to a Corona_Mip_Map_8.data file located in one of the random folders under ImageTextureCache. I will tell it to remove the file, and sure enough, if I navigate to that folder, the Corona_Mip_Map_8.data file is gone.

I want to figure out what is causing this. It seems something is happening before the trojan is detecting that is creating it I the Temp folder in the first place. Is there a way I can look at what the contents are in the Mip Map folder and know if there is a texture file that is infected?

[romullus]

This is false positive detection. It was reported here on the forum several times already by different users, including me. The file in question is being temporarily created by Corona's out of core textures feature. You can disable it if that false alarm is annoying you. Go to render setup>performance>performance settings and uncheck automated out of core textures. Keep in mind however that any older scene that was saved with out of core enabled, will have this feature on, so you'll have to uncheck it the next time you load an older scene, otherwise it will trigger Windows defender again.

To Corona team - would it be possible to contact Microsoft and some data about those out of core files, so they could adjust their detection code accordingly?

[John.McWaters]

This is false positive detection. It was reported here on the forum several times already by different users, including me. The file in question is being temporarily created by Corona's out of core textures feature. You can disable it if that false alarm is annoying you. Go to render setup>performance>performance settings and uncheck automated out of core textures. Keep in mind however that any older scene that was saved with out of core enabled, will have this feature on, so you'll have to uncheck it the next time you load an older scene, otherwise it will trigger Windows defender again.

To Corona team - would it be possible to contact Microsoft and some data about those out of core files, so they could adjust their detection code accordingly?

Ah, got it...so there is something about the file structure of the mip map this is causing a false positive from windows.