Skip to main content

atiesrxx.exe

  • March 21, 2016
  • 10 replies
  • 103 views

After updating my AMD 16.3.1 drivers Webroot keeps flaging atiesrxx.exe as a virus. I am using Windows 10.

10 replies

Baldrick
Gold VIP
  • Gold VIP
  • March 21, 2016
Hi onthego
 
Welcome to the Community Forums.
 
Given what is involved this sounds like a False Positive so the best thing to do is to Open a Support Ticket to let the Support Team know so that they can reveiw the file and then whitelist it in the Cloud.
 
Regards, Baldrick

  • March 30, 2016
Just an FYI on the detection of AMDATI Catalyst Control Center and other AMDATI modules and drivers.
 
Beginning a few months ago, a few less mainstream antivirus vendor engines began to detect certain AMDATI files as malicious.  And like a domino-effect, other vendor engines began to detect them.  Now the situation has reached a point where it is most definitely out-of-hand for AMD system users. 
 
Unbeknownst to many users, there are mecahnisms whereby antivirus vendors do copyshare signatures - and what the OP is experiencing is one of the unfortunate end results - en masse false positives.
 
It is a curious situation, because some of these modules and drivers have been provided by AMDATI as part of OEM installs and on user systems for many years - without any scan engine detections (false positives).  
 
It is a real mess that AMD now needs to sort out directly with each AV vendor, but I suspect it will take many months for this issue to be fully resolved.
 
 

Sheltieuk
New Voice
Forum|alt.badge.img+19
  • New Voice
  • March 30, 2016
Well that's strange I am also running that version of AMD Catalyst and using that particular file and it's not being flagged or blocked on my system Win 10 64bit.

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • March 30, 2016
Same here.. I am running AMD Catalyst On Windows 10 32bit! I am not having this blocked either?

  • March 30, 2016
I know on my AMD system that I upgraded Catalyst Control Center using the official AMD direct download link - verified the URL and all.  After installation, several modules were flagged as malicious.  I had to create file scan exclusions for them.
 
Without carefully comparing all the files that are detected and not detected from different user systems side-by-side it is mere speculation as to why this happening.
 
Like I said, its a mess...

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • March 30, 2016
Hi HJLBX,
 
Thanks for explaning that...:D

  • March 30, 2016
If any AMDATI files are detected, then it should be assumed that they are, indeed, malicious - and direct the user to submit a support ticket.
 
This would be the right thing to do... it is better to err on the side of caution.

Ssherjj
Moderator
Forum|alt.badge.img+62
  • Moderator
  • March 30, 2016
I agree with that totally!:D

Baldrick
Gold VIP
  • Gold VIP
  • March 30, 2016
@ wrote:
Well that's strange I am also running that version of AMD Catalyst and using that particular file and it's not being flagged or blocked on my system Win 10 64bit.
Same here, Sheltieuk...and nada problems as far as I can see. ;)
 
Baldrick

Baldrick
Gold VIP
  • Gold VIP
  • March 30, 2016
@ wrote:
If any AMDATI files are detected, then it should be assumed that they are, indeed, malicious - and direct the user to submit a support ticket.
 
This would be the right thing to do... it is better to err on the side of caution.
That goes without saying...given what they are or may be deemed to relate to.

Baldrick