F14 not authorized / antivirus / false positive

[draconus]

39 minutes ago, MAXsenna said:

3. Did you perform a full slow? It will take some time.

He means DCS repair process

[BIGNEWY]

Please if you are struggling with adding DCS to your antivirus exception and running a slow repair contact our support team directly, they are happy to assist anyone 

https://www.digitalcombatsimulator.com/en/support/

thank you 

[Rudel_chw]

3 hours ago, SOLIDKREATE said:

We also shoul;d not have to forego protection to use HB's product. I don't see how that is "our" problem.

ok, guess you will have to wait for an update of the antivirus for this issue to be solved while keeping the protection. 

[AndreNL]

15 hours ago, Art-J said:

It's an old and reoccuring issue. Most likely your Defender or Antivirus deleted one of .dll files required for the module to work. Exclude your DCS folder, run a repair (to restore the file) and you're done. More details here:

 

    It was quite a hassle to turn off the firewall, but I eventually managed it.

Thanks Art-J!

[SOLIDKREATE]

@MAXsenna I was in 'Custom Mode' mode. 'Cold War' mode didn't work either.

[Lange_666]

@SOLIDKREATE:
I see in your screenshots that your AV still has a problem listed. If done everything right this shouldn't be. It should be green (same for your Firewall).
You have to add the Eagle Dynamics folder (and your Saved Games folder while you're at it) exception to the AV "before" you run a repair.

 

[SOLIDKREATE]

Ah I see I have found the issue. I went back and did some more investigating. The repair did work, the AV being off helped. I set the mission date to 1985 and the F-14A showed up. I was also in the cockpit and spread the wings and hit the burner then swept the wings. Did some aerobatics and waht not. @BIGNEWY See solution below, thanks to all who contributed.

 

1. TURN OFF AV
2. TURN OFF FIREWALL
3. PERFORM SLOW REPAIR
4. CLICK YES ON THE DELETION OF THE OLD F14.dll
5. CREATE A MISSION
6. SET DATE TO THE APPROPRIATE TIME DESIRED AIRCRAFT WOULD HAVE BEEN IN SERVICE.

 

 

[MAXsenna]

@MAXsenna I was in 'Custom Mode' mode. 'Cold War' mode didn't work either.

Happy you solved it. No clue what either "custom" nor "Cold War" modes are.
Happy skies!

Sent from my SM-A536B using Tapatalk

[draconus]

24 minutes ago, SOLIDKREATE said:

• TURN OFF AV
• TURN OFF FIREWALL
• PERFORM SLOW REPAIR
• CLICK YES ON THE DELETION OF THE OLD F14.dll
• CREATE A MISSION
• SET DATE TO THE APPROPRIATE TIME DESIRED AIRCRAFT WOULD HAVE BEEN IN SERVICE.

Firewall has nothing to do with it.

Turning AV is optional - most of the users prefer to just create scanning exceptions for specific folders.

Historical filter in ME has been functional since a few years and also has nothing to do with the issue. It was already hinted by @MAXsenna a few posts ago (https://forum.dcs.world/topic/370469-f14-not-authorized/page/5/#findComment-5618559).

 

[Rudel_chw]

3 hours ago, MAXsenna said:

4. Mission Editor? Has the Historical Filter turned itself on? Clock icon bottom of the screen.

29 minutes ago, SOLIDKREATE said:

Ah I see I have found the issue. I went back and did some more investigating. The repair did work, the AV being off helped. I set the mission date to 1985 and the F-14A showed up.

 

Ahh ... so @MAXsenna was on the right path here  

 

7 minutes ago, MAXsenna said:

Happy you solved it. No clue what either "custom" nor "Cold War" modes are.

 

Those are not modes, but default coalitions that you can choose from when creating a new mission ...  only wish ED allowed for more than a single custom coalition, I'd rather be allowed to create a new coalition and give it a name, like "1944 France" or "1944 Pacific", to reuse on further missions.

Edited March 17 by Rudel_chw

[MAXsenna]

17 minutes ago, Rudel_chw said:

Those are not modes, but default coalitions that you can choose from when creating a new mission ...  only wish ED allowed for more than a single custom coalition, I'd rather be allowed to create a new coalition and give it a name, like "1944 France" or "1944 Pacific", to reuse on further missions.

Ah, I see! Thanks!  

[Jayhawk1971]

vor 2 Stunden schrieb AndreNL:

    It was quite a hassle to turn off the firewall, but I eventually managed it.

Thanks Art-J!

Hopefully this is a "lost in translation" issue, and you didn't really turn off your firewall?!

You just need to create an exclusion - a whitelist item - for the DCS folder. Other than that, you better leave your firewall up and running.

[AndreNL]

3 hours ago, Jayhawk1971 said:

Hopefully this is a "lost in translation" issue, and you didn't really turn off your firewall?!

You just need to create an exclusion - a whitelist item - for the DCS folder. Other than that, you better leave your firewall up and running.

Nope, not a "lost in translation" issue.... I had to turn it off completly.

I digged more into the problem, and found the issue in the windows defender. Had a option to restore the "trojan" and ignore it and now it's done.

Firewall is active again without any issue. 

[BIGNEWY]

threads merged

[Morat]

17 hours ago, Rudel_chw said:

 

Piss poor?  ... what I find poor is this expectation of you that a fault of the Antivirus software, tagging as infected a file that is not, should somehow be solved by an entirely different company. Why don't you better go onto your AV company's forum and tell them that they are doing a piss poor job?

Multiple AV products are detecting this file as a virus, why did this pass QA? Do you think games coders expect that users should trust their products over and above AV software? Don't be so ridiculous. AV is there for a reason, and any properly coded application should at least be tested to ensure it doesn't trigger detection or if it does the developers should contact the AV companies before they put their customers in a bad position like this.

[scommander2]

34 minutes ago, Morat said:

Multiple AV products are detecting this file as a virus

No offensive: how can the code get compiled with the binary code contains the identical signature in the AV database?  If yes, should the code to be written again? 

[Draken35]

19 minutes ago, scommander2 said:

No offensive: how can the code get compiled with the binary code contains the identical signature in the AV database?  If yes, should the code to be written again? 

 

So, so how much are you willing to pay for a module if the developer will have to rewrite the code every single time that its hash/signature matches to a virus that will be discovery tomorrow? Not to mention, will you be mad and complain if a previously fixed bug in the module reappears due to that rewrite ? Of if new bugs are introduced because of it? 

Edited March 17 by Draken35

[Draken35]

1 hour ago, Morat said:

Multiple AV products are detecting this file as a virus, why did this pass QA? Do you think games coders expect that users should trust their products over and above AV software? Don't be so ridiculous. AV is there for a reason, and any properly coded application should at least be tested to ensure it doesn't trigger detection or if it does the developers should contact the AV companies before they put their customers in a bad position like this.

Why did it pass QA? Perhaps, because when it was tested, there was no virus that matched it signature? See the screenshot I pasted above.

 

[scommander2]

25 minutes ago, scommander2 said:

No offensive: how can the code get compiled with the binary code contains the identical signature in the AV database?  If yes, should the code to be written again? 

It is not a preventable, and it is not practice.  Put the file into the exception list and move forward since it is a false-positive report. 

Edited March 17 by scommander2

[Rudel_chw]

1 hour ago, Morat said:

Don't be so ridiculous. AV is there for a reason, and any properly coded application should at least be tested

ridiculous? … and having your excellent antivirus wrongly registering an innocent file as a virus is not ridiculous?  

as you don’t appreciate the suggested workaround, I will unsubscribe from the thread to avoid a sterile argument, bye.

[Urbi]

Dear ED Team!
A solution is being offered here that isn't actually a solution. After the last Microsoft Defender update, at least for Windows 11, the DLL uploaded by Heatblur Simulations is detected in the bin-mt folder as unwanted or dangerous software. It is unacceptable that I am asked to disable the protection for my PC and allow this DLL to access my PC. No other DLL allows a similar situation. Since this DLL is provided with the ED update, I request ED to resolve this situation as soon as possible. It is a violation of data protection regulations. I do not grant the Heatblur Simulations consortium the right to access my PC. I have now been forced to delete the Heatblur Simulations F-14 Mod to prevent damage to my PC.

[Draken35]

9 minutes ago, Urbi said:

Dear ED Team!
A solution is being offered here that isn't actually a solution. After the last Microsoft Defender update, at least for Windows 11, the DLL uploaded by Heatblur Simulations is detected in the bin-mt folder as unwanted or dangerous software. It is unacceptable that I am asked to disable the protection for my PC and allow this DLL to access my PC. No other DLL allows a similar situation. Since this DLL is provided with the ED update, I request ED to resolve this situation as soon as possible. It is a violation of data protection regulations. I do not grant the Heatblur Simulations consortium the right to access my PC. I have now been forced to delete the Heatblur Simulations F-14 Mod to prevent damage to my PC.

If you bother to read the other (or one of the other threads about this topic, I lost count already), you will learn that the files were already submitted to be whitelisted. Meanwhile, you can disable the module or add the exclusion. Your choice. 

Please, make sure to wave whatever law you mentioned to the bad actors that make the viruses, since I'm sure you didn't give them permissions to your PC either... Who knows? Perhaps that will make them stop pestering us...

[AndyJWest]

It should probably be noted that if there was a way to reliably write/compile software in a manner guaranteed not to trigger AV detection, the creators of malicious software would be doing the same thing.

AV software relies on pattern-matching and statistical methods to detect potential viruses etc, making false positives inevitable. This is why Defender and the like allow trusted software to be excluded.

 

[MAXsenna]

1 hour ago, Urbi said:

A solution is being offered here that isn't actually a solution.

Please enlighten us with the solution!  

1 hour ago, Urbi said:

the DLL uploaded by Heatblur Simulations is detected in the bin-mt folder as unwanted or dangerous software. 

Factually incorrect as there are no HB files in that folder. 

1 hour ago, Urbi said:

It is unacceptable that I am asked to disable the protection for my PC and allow this DLL to access my PC.

What is unacceptable is that there exists evil and bad people in the world. Oh, wait! Would we even have a combat sim in Utopia?  

1 hour ago, Urbi said:

I do not grant the Heatblur Simulations consortium the right to access my PC.

What??? Excluding the DCS folders in your non-functioning Anti-Virus solution won't give Heatblur access to your computer.  

1 hour ago, Urbi said:

I have now been forced to delete the Heatblur Simulations F-14 Mod to prevent damage to my PC.

Your loss and a blatant lie! Do better and do not spread disinformation, please! 

[Urbi]

1 hour ago, Draken35 said:

If you bother to read the other (or one of the other threads about this topic, I lost count already), you will learn that the files were already submitted to be whitelisted. Meanwhile, you can disable the module or add the exclusion. Your choice. 

Please, make sure to wave whatever law you mentioned to the bad actors that make the viruses, since I'm sure you didn't give them permissions to your PC either... Who knows? Perhaps that will make them stop pestering us...

Mister Draker35, there is a suspicion that there is a script in the DLL that executes a command outside of the actual program and changes something. Possibly the recording of the user's IP address. This isn't the first time that the virus has been recommended to be disabled. I had previously alerted BIGNEWY to such an activity (recording of the IP address) from a DLL. Personally, I don't trust Heatblur Simulations one bit. (SUPREMA Sp. z o.o. z o.o.) That is my opinion, and I have my reasons for it. And once again, I ask that this virus annoyance be removed.