Avira AntiVir Guard and Black Shark -- VIRUS DETECTED

[Vesperatus]

Good afternoon gents,

 

That just poped on my screen :

 

Ka-50\bin\stable\Ka50.dll is the TR/Rootkit.Gen Trojan

 

 

How do I make sure it is not infected ? What is in that file.

 

I just saw that on Avira website, under the TR/Rootkit.Gen page :

Description updated by Andrei Ivanes on Tue, 17 Mar 2009 08:52 (GMT+1)

Edited March 19, 2009 by Vesperatus

[Vesperatus]

More files.

 

WorldGeneral.dll

View.dll

 

My guess is that it is an error with the virus definition, but you never know with those russians scientists ! :pirate::smartass:

[EtherealN]

Someone with better knowledge would have to respond, but it is possible that it is detecting a rootkit included in the StarForce ProActive that is used with DCS. However, I am not certain that ProActive's scheme actually includes a rootkit so it might also be a false positive.

[Groove]

My guess is a false positive after an update of the heuristic routines of certain virus scanners. I will re-check with NOD32 today.

[jason_peters]

have this too

[SNAFU]

Here the same.

 

Had an AVIRA Update 2 days ago, just turned on the PC for 10minutes yesterday and the warnings popped up every 30seconds. I pressed "ignore" but that didn´t work.

 

I use the International DL version of BS, Win Vista 64bit.

[Airway]

I guess fase positive too. Yesterdays scan was without positives.

Now uploading the suspect files to Avira.

[Nate--IRL--]

Same here...

 

Nate

[Vesperatus]

I still had that issue after avira update last night.

 

Any official anwsers ?

[MBot]

I have it too by the way.

[GGM]

I've Avira Premium too... but didn't lpunched game yesturday - thus no warnings yet but AvGuard updated so will check soon after returning to home... will share result.

[Airway]

I still had that issue after avira update last night.

 

Any official anwsers ?

 

No reply from them yet.

 

Still having this issue with the lastest virus definition.

[GGM]

Affirmative!

got TR/Rootkit.Gen - Trojan warning on following files:

Ka50.dll

View.dll

 

Set them in ignored stance. Hope Avira dev's review situation soon.

[Vesperatus]

Starforce is on the downloaded english version, this is what I have. It would'nt surprise me at all if it included a rootkit. That might just be what avira is detecting or it might be a false positive.

 

One way or the other, i'm waiting for some official replies ( DCS team or Avira side ).

[GGTharos]

I'd be surprised if it was anything but a false positive. Rootkit my foot.

[sydost]

hello... I have the same thing. I checked the files with Kasparsky's online scanner and it didn't find anything on them.

[159th_Viper]

Same here - I just hit the 'Ignore' tab.........Not that difficult :music_whistling:

[Vesperatus]

Hitting the ignore tab doesnt do anything for me. Warning keeps popping. I have to disable the anti-virus. Not good enough for me.

[Acedy]

According to Eagle it is a false positive. A user in the German forum section reported that the problem is known to Avira. To disable the warning you can set an exception for the ./Ka-50/bin/stable/ folder. How to do that for the scanner/guard is explained here:

 

http://www.free-av.de/documents/products/pdf/en/man_avira_antivir-personal_en.pdf

 

See pages 57f (Scanner) and 62ff (Guard).

[Vesperatus]

Just updated my avira and no notifications for a while now.

 

Seems good !

[JimMack]

Dear All - is there a conclusion to this issue? Have Avira updated their software so as not to send a warning?

[159th_Viper]

Dear All - is there a conclusion to this issue? Have Avira updated their software so as not to send a warning?

 

IIRC there was mention made of setting an exeption of sorts which I could not figure out in any event.

 

After a while I got so fedup with it all that I uninstalled Avira entirely and installed Avast..........Just as well as I ran a scan and it picked up a Trojan that Avira missed.

[Vesperatus]

Avira did update the definiton. I do not have the warnings anymore.

[Acedy]

Dear All - is there a conclusion to this issue? Have Avira updated their software so as not to send a warning?

 

Did my last scan on sunday and still got warnings. But if you set exceptions it's okay.

[MBot]

I also set an exception and let it be like that.