HeatblurJester.dll Virus Warnings?

[freehand]

I used to have more false positives than hot dinners many years ago when I was a very naughty boy.

[Zabuzard]

I have friends that has completely uninstalled DCS to be on the safe side until the warning issues has been resolved. To be fair, It was not only Heatblur products but also
warnings from another 3rd party.

Im 100% sure that there are nothing malicious going on, but there are other players who takes the warnings very seriously these days. It really needs to be fixed as soon as possible.

Agreed. Sadly there isn't too much that can be done besides sending in the files to AV software producers for whitelisting. Which has been done by ED, us and other thirdparties weeks ago already.

[Hiob]

On 7/1/2024 at 1:01 PM, GKOver said:

I have made a complete repair of my DCS World installation that there are only official files being installed. And I am using this Computer only for my simulations: DCS World and Flightsimulator. For nothing else.

 

But by using windows defender I have found five !!! files which are being marked containing the trojan.mprotect.

 

Checking these files against virustotal.com showed quite dangerous results which can‘t be ignored:

Beside: the other infos on the other tabs are also not good….

 

Somebody doesn’t know how to work with virustotal. 

[GKOver]

In the meantime there are many different files inside DCS which are belonging to F-15E, F-14, F-4 and it is NOT a solution for me to exclude the DCS installation directory in the antivirus settings.

30 of 70 different virus scanners at virustotal.com and the windows defender identifies these files as contaminated/dangerous. I can‘ believe that these alarms are false-positive.

 

More than 6 months later nothing happened. It shouldn‘t be a problem for Eagle Dynamics and their partner to ask these anti virus companies for a „fix“ in their scanners for deactivating the alarm…..

or to fix the basic problem with these dlls.

 

I am not using the modules with virus alarms anymore and I have deleted these dlls.

[Zabuzard]

In the meantime there are many different files inside DCS which are belonging to F-15E, F-14, F-4 and it is NOT a solution for me to exclude the DCS installation directory in the antivirus settings.

30 of 70 different virus scanners at virustotal.com and the windows defender identifies these files as contaminated/dangerous. I can‘ believe that these alarms are false-positive.

 

More than 6 months later nothing happened. It shouldn‘t be a problem for Eagle Dynamics and their partner to ask these anti virus companies for a „fix“ in their scanners for deactivating the alarm…..

or to fix the basic problem with these dlls.

 

I am not using the modules with virus alarms anymore and I have deleted these dlls.

Please dont crosspost. See my answer on the other thread, cheers.

[Hiob]

On 2/8/2025 at 11:47 PM, GKOver said:

30 of 70 different virus scanners at virustotal.com and the windows defender identifies these files as contaminated/dangerous. I can‘ believe that these alarms are false-positive.

That is because you don't seem to know how heuristic virus detection actually works and why therefore false positives are a very common occurrence. 
Actually, the very poor success rate and the fact that false positives vastly outweigh actual true positive detections, makes consumer class AVs more of threat than actual viruses.
Which in most cases enter the system by poor user behavior like opening links in unsolicited emails or plugging in alien USB-devices. AVs just give a wrong sense of security which can lead to lower guards on the user side.

IF you happen to run in a DCS-related virus by downloading some corrupted files ,that is most likely when using some unofficial mods downloaded from some fishy source (aka not directly from the developer).

So, don't do that and you're reasonable safe with excluding DCS-Folders from the AV-scanner. (And I would also recommend turning of real-time protection whilst playing for better performance and loading times)