Jump to content

F-15_CPT.dll identified as virus: Trojan.gen MBT (after latest update)

gman066

By gman066
in F-15E

 Share

Recommended Posts

Rudel_chw

Rudel_chw

Posted
Posted

It's a fault of your antivirus, removing an innocent file as a virus. Add a folder exclusion to your AV for the path where you have DCS installed and afterwards perform a DCS repair procedure to recover the missing file.

  • Like 1

 

For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra

For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar

Mobile: iPad Pro 12.9" of 256 GB

gman066

gman066

Posted
  • Author
Posted (edited)

okay. thanks.

I haven't seen this type of issue before with dcs. any reason why antivirus is taking this particular file in recent update? my av is norton latest.

Edited by gman066
rob10

rob10

Posted
Posted
18 minutes ago, gman066 said:

I haven't seen this type of issue before with dcs. any reason why antivirus is taking this particular file in recent update? my av is norton latest.

Scroll down through this forum and you'll see a bunch of threads in the 1st page alone reporting this.  There are a number of AV's that seem to flag DCS files fairly regularly and while Norton isn't one of the top 3 offenders it's pretty commonly implicated.

  • Like 2
Robsongois

Robsongois

Posted
Posted (edited)

I have Norton too, and the same thing happened to me, but this is not normal. In fact, it has never happened.

This only happens with the F-15E, which has only caused problems for users.

Edited by Robsongois
pii

pii

Posted
Posted
On 7/27/2024 at 11:53 AM, gman066 said:

okay. thanks.

I haven't seen this type of issue before with dcs. any reason why antivirus is taking this particular file in recent update? my av is norton latest.

 

I scanned my DCS folder and it had 13 DCS DLL listed as viruses or PUP.

Come on ED fix your DLL's

18 hours ago, Robsongois said:

I have Norton too, and the same thing happened to me, but this is not normal. In fact, it has never happened.

This only happens with the F-15E, which has only caused problems for users.

 

It will and does happen for other aircraft. I just scanned my DCS folder, and 13 DLL files were flagged as Viruses or PUPs. It recently happened to a Mig29 plane, and you couldn't even remove the DLL. I had to reformat my drive and reinstall DCS.

Rudel_chw

Rudel_chw

Posted
Posted
41 minutes ago, pii said:

Come on ED fix your DLL's

 

And why the AV maker can't improve its PUP detection so that it does not incorrectly flags a file as if it were a virus? ... I find it funny how most users tend to blame ED for the poor antivirus abilities 🙄

  • Like 2

 

For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra

For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar

Mobile: iPad Pro 12.9" of 256 GB

rob10

rob10

Posted
Posted
2 hours ago, pii said:

I scanned my DCS folder and it had 13 DCS DLL listed as viruses or PUP.

Come on ED fix your DLL's

It will and does happen for other aircraft. I just scanned my DCS folder, and 13 DLL files were flagged as Viruses or PUPs. It recently happened to a Mig29 plane, and you couldn't even remove the DLL. I had to reformat my drive and reinstall DCS.

Not an ED issue.  If you send those files off to your AV provider there is pretty much a 100% chance that they'll whitelist them and the problem goes away.  There are a handful of AV's that have consistent problems with DCS.  If DCS had an actual virus problem it wouldn't always be the same ones picking it up and the rest not.

And when those ones stop being flagged it will be because the AV whitelisted them, not because ED "fixed" (i.e. changed) them.

  • Like 3
pii

pii

Posted
Posted
On 7/28/2024 at 5:39 PM, rob10 said:

Not an ED issue.  If you send those files off to your AV provider there is pretty much a 100% chance that they'll whitelist them and the problem goes away.  There are a handful of AV's that have consistent problems with DCS.  If DCS had an actual virus problem it wouldn't always be the same ones picking it up and the rest not.

And when those ones stop being flagged it will be because the AV whitelisted them, not because ED "fixed" (i.e. changed) them.

I'm not sure. I have used four different AV programs, and they all flag some DCS DLLs and no other DLLs, so either they are indeed viruses or DCS is doing something that is causing their and only their DLLs to be flagged. It may not be a virus, so once looked at, they would, of course, be whitelisted, but that doesn't negate the original reason for it getting flagged.     

I've marked them as trusted, but I'm not really sure they are.  

pii

pii

Posted
Posted
On 7/28/2024 at 3:36 PM, Rudel_chw said:

 

And why the AV maker can't improve its PUP detection so that it does not incorrectly flags a file as if it were a virus? ... I find it funny how most users tend to blame ED for the poor antivirus abilities 🙄

Yeah, it's hilarious! I've used four separate AV programs, and they all hit on DCS DLLs. So please explain how you know it's all bad "AV abilities" and nothing to do with ED.

Rudel_chw

Rudel_chw

Posted
Posted
4 hours ago, pii said:

please explain how you know it's all bad "AV abilities" and nothing to do with ED.


I’ve dcs excluded from the AV since a long time ago, as these false positives problem is not new …. And in all that time I’ve not had a single issue with my PC that could be caused by a virus.

  • Like 1

 

For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra

For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar

Mobile: iPad Pro 12.9" of 256 GB

pii

pii

Posted
Posted
On 8/1/2024 at 4:29 AM, Rudel_chw said:


I’ve dcs excluded from the AV since a long time ago, as these false positives problem is not new …. And in all that time I’ve not had a single issue with my PC that could be caused by a virus.

So you believe all viruses mess with your PC, and some don't just quietly steal your info? That's cool, but it's hardly convincing for your argument.

Oh well. Good luck and happy flying. 

Rudel_chw

Rudel_chw

Posted
Posted
41 minutes ago, pii said:

That's cool, but it's hardly convincing for your argument.


well, I will not attempt to convince you on this, good luck to you too.

  • Like 2

 

For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra

For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar

Mobile: iPad Pro 12.9" of 256 GB

Despayre

Despayre

Posted
Posted (edited)
5 hours ago, pii said:

So you believe all viruses mess with your PC, and some don't just quietly steal your info? That's cool, but it's hardly convincing for your argument.

Oh well. Good luck and happy flying. 

If you own/use a govt-mandated tracking device cell phone, your entire argument is invalid.

Edited by Despayre
  • Like 2

I'm not updating this anymore. It's safe to assume I have all the stuff, and the stuff for the stuff too. 🙂

BJ55

BJ55

Posted
Posted
6 hours ago, pii said:

some don't just quietly steal your info?

Install a good security sw with an advanced firewall and hips, enable windows event viewer dns logging, use LiveTcp and Wireshark (or other sw) to monitor your connections... Then you will discover that those dll's don't make any kind of network requests.

  • Like 2

I7-12700F, 64GB DDR4 XMP1 3000MHz, Asus Z670M, MSI RTX 3070 2560x1440 60Hz, TIR 5, TM WH VPC base, TM rudder, Win10 Pro

pii

pii

Posted
Posted
4 hours ago, Despayre said:

If you own/use a govt-mandated tracking device cell phone, your entire argument is invalid.

 

oh geez lol, what does my non-government-mandated tracking device have to do with my PC? 

3 hours ago, BJ55 said:

Install a good security sw with an advanced firewall and hips, enable windows event viewer dns logging, use LiveTcp and Wireshark (or other sw) to monitor your connections... Then you will discover that those dll's don't make any kind of network requests.

Have you, because that would be a good argument.

  • Like 1
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...