Threats & quarantine
How SimSweep detects malware-like behavior in script mods, what severity labels mean, and how to quarantine, restore, or delete flagged files.
Most CC is perfectly fine. But script mods run actual code, and occasionally something sketchy slips in. SimSweep scans your script mods for known malware signatures and dangerous patterns so you don't have to take anyone's word for it.
How threat detection works#
SimSweep targets .ts4script files, which are ZIP archives containing compiled Python bytecode. Each one gets hashed and checked against a community safe list. If a file doesn't clear that, SimSweep inspects it for red flags: dangerous system imports, raw IP addresses, Discord webhooks, OS and process access, and paths that have no business being in a Sims mod.
Threat results can lower your overall health score on the Home dashboard.
Severity levels#
When threats appear, they're labeled by severity:
| Label | What it means |
|---|---|
| Known Malware | Matches a confirmed malicious signature. Remove this. |
| High Risk | Dangerous patterns found, not yet in the known-bad list. Treat with caution. |
| Flagged | Suspicious patterns that warrant a closer look. |
| Low Concern | Something caught the scanner's attention but is probably fine. Worth noting. |
If nothing is flagged, Threats shows "All clear - no flagged files."
Reviewing threats#
After a scan, if flagged files exist, a Threats card appears in Diagnostics. You can also filter My CC by "Flagged as threat" to find specific files across your library. Each flagged file shows its severity and a Details view with more information.
From the detail modal you can:
- Show in Explorer (Windows) or Show in Finder (Mac) to locate the file on disk
- Copy SHA256 to share the hash with the community or verify it elsewhere
- Mark as Safe if you've investigated and trust the file (this only affects your local machine, not anyone else's)
- Report to flag something for community review
Quarantine#
Quarantine moves a file out of your active Mods folder into a sibling .simsweep-quarantine folder. The game won't load files from there, so it's the safest way to park something while you decide what to do with it.
To quarantine one or more files, select them in the Threats view or My CC and choose Quarantine selected.
The Quarantine panel is available from Diagnostics, Home quick actions, and the file inspector. Inside you'll find:
- Restore selected to move files back into Mods
- Delete selected to remove files permanently
- Empty quarantine to delete everything in the quarantine folder at once
- Show in Explorer / Show in Finder to open the quarantine folder on disk
Heads up: Permanent delete cannot be undone from SimSweep. Make sure before you use "Delete permanently" or "Empty quarantine."
Restoring a file#
If you decide a quarantined file is actually fine, select it and choose Restore selected. SimSweep moves it back into your Mods folder.
Note: The quarantine manifest tracks which files are there and where they came from. If the manifest is corrupt or unreadable, SimSweep will warn you and show an empty list, but the files are still on disk in the quarantine folder. You can find them via "Show in Explorer" or "Show in Finder."
About "Mark as Safe"#
Marking a file safe dismisses it locally. It doesn't change the community safe list, and it doesn't mean the file is actually clean. Use it when you've done your own research and made a deliberate call to keep the file. The scanner won't flag it again for you, but another installation would still see it flagged.
Next up#
Wondering whether your mods might also be crashing the game? See Crash logs & CrashGuard for how SimSweep reads exception files and watches for new crashes in real time.