Question - Norton quarantined ATz2402k.exe (IDP.Generic) is this part of MQ? (1 Viewer)

[mastar]

Norton quarantined a file on my PC called ATz2402k.exe and flagged it as IDP.Generic. I’m using MQ with MQ2Eskay, MQ2Mage, and MQ2Bard on my SK/Bard/Mage setup, and I’m trying to figure out whether this file is related to MQ or if it’s something I should delete.

Here’s what Norton reported:

• Threat name: IDP.Generic
• Status: Moved to Quarantine
• Detection type: Behavioral Protection
• File is “very new”
• “Very few users” have used it
• Risk level: High

I’m not sure if this is a false positive from Norton or if this file isn’t part of MQ at all. Has anyone seen ATz2402k.exe before or had Norton flag something similar?
anyone else had this problem ?
Should I restore it or just delete it?

Thanks for any help.

 

[TempusX]

This is very likely a false positive. MQ has a randomly(?) generated executable it runs from that is unique to (I suspect) your unique HWID. Or Unique to that install. The point is, it's a jumble of letters and numbers that is going to be unique to that particular install. You'll notice in your task manage under the details section, you will never see macroquest.exe, but you'll find a random letter/number.exe. Mine for example, looks like ydIEkaNM.exe and has the same icon as the macroquest icon (purple, gold lettering).


As a rule of thumb, excluding your MQ folder and EQ folder from virus/malware/etc scanners generally helps with performance.