HeatblurUiLib.dll virus threat and deleted

[stag1978]

Dear All,

I have had a virus varning from the HeatblurUiLif.dll file and my virus protection deleted the file. After that the F4 module was shown as not registered, available for one day. I have repaired, the file was copied back but at next start it started again.

Do you have any idea what is happening? I have updated my anti-virus software (ZoneAlarm Pro that is working flawlessly for 5-6 years fo me) today, before tried to start DCS.

[MAXsenna]

Dear All,
I have had a virus varning from the HeatblurUiLif.dll file and my virus protection deleted the file. After that the F4 module was shown as not registered, available for one day. I have repaired, the file was copied back but at next start it started again.
Do you have any idea what is happening? I have updated my anti-virus software (ZoneAlarm Pro that is working flawlessly for 5-6 years fo me) today, before tried to start DCS.

ZoneAlarm gives a false positive. Get rid of ZoneAlarm, and use the free Defender included with Windows. And/or exclude the core DCS installation folders. And the DCS folders in Saved Games.
On another note, there are numerous posts and threads about this issue, and a Google search would've taken you straight to the answer.
Cheers!

Sent from my SM-A536B using Tapatalk

[SAEVONIX]

In Kaspersky there is the same issue, it started three days ago

[GKOver]

In the meantime there are many different files inside DCS which are belonging to F-15E, F-14, F-4 and it is NOT a solution for me to exclude the DCS installation directory in the antivirus settings.

30 of 70 different virus scanners at virustotal.com and the windows defender identifies these files as contaminated/dangerous. I can‘ believe that these alarms are false-positive.

 

More than 6 months later nothing happened. It shouldn‘t be a problem for Eagle Dynamics and their partner to ask these anti virus companies for a „fix“ in their scanners for deactivating the alarm…..

or to fix the basic problem with these dlls.

 

I am not using the modules with virus alarms anymore and I have deleted these dlls.

[Zabuzard]

In the meantime there are many different files inside DCS which are belonging to F-15E, F-14, F-4 and it is NOT a solution for me to exclude the DCS installation directory in the antivirus settings.
30 of 70 different virus scanners at virustotal.com and the windows defender identifies these files as contaminated/dangerous. I can‘ believe that these alarms are false-positive.
 
More than 6 months later nothing happened. It shouldn‘t be a problem for Eagle Dynamics and their partner to ask these anti virus companies for a „fix“ in their scanners for deactivating the alarm…..
or to fix the basic problem with these dlls.
 
I am not using the modules with virus alarms anymore and I have deleted these dlls.

We are asking them to whitelist it. And it does work, it takes a few weeks.

It is just that as soon as the file slightly changes with the next DCS update that these Antivirus softwares will flag them again, as the changed file is not whitelisted already. So the whitelisting process has to be repeated (which we and ED do with each update).

This is normal. AAA studios suffer from this as well - normally these companies pay for business accounts at MS, Kaspersky and Co to speed up the process and they typically also delay their planned updates until the files have been confirmed to be whitelisted before sending them to users.
Since this part isnt done for DCS (for a few reasons) you experience this problem as end user.

If you do believe ED or us are shipping actual viruses then I do not think there is much we can do to convince you from the opposite. Then you either have to stop playing DCS at all if you do not trust the publisher or at least have to stay on an old version and wait with updates for ~4 weeks to be sure the whitelisting for those files specifically has been done already.