F14 not authorized / antivirus / false positive

[MAXsenna]

24 minutes ago, Zabuzard said:

Kindly read through the previous messages of this thread, this has been explained in detail at least 3 times already throughout the 8 pages. Cheers

Only three times? I was under the impression it was part of your daily routine!  

[RustBelt]

7 hours ago, Draken35 said:

Agree, there shouldn't be hackers creating viruses or altruistic Ethiopian "princes" who want to share their wealth  but, sadly, they do exists.

But it is! Every single new update or patch is, in fact, new software from an AV perspective. Consider as well that, between DCS updates, there are several millions of new malware pieces identified . 

At the moment, and in the foreseeable future, there are only 2 options when these false positives appear (and they will):

1) Add an exclusion the the AV.

2) Wait until the AV vendor whitelist the files summited by ED/3rd party. Of course, this will take time... Can you imagine how long it takes to process all those whitelist request?

Which one to choose, is up to each of us and so is how to mitigate the risks associated to option 1)

 

I mean, option 3 is ED stops using VMProtect.

[DCoffey]

6 hours ago, Archangel44 said:

Are you talking to me? If not, then don’t quote my posts or use them as a spring board to enter the conversation 

I was having a conversation with AdrianL.

Please don’t preach to me while interrupting, not a good form. Makes one look immature or full blown ADD. You would do well to listen twice as much as you speak.

Thank you.

No your response was rude and shows your attitude with someone trying to help. 

Edited March 21 by DCoffey

[scommander2]

Perhaps, we should close this thread since majority people are in another thread, or this issue has a workaround solution now. 

[PhantomHans]

Sloppy antivirus software.  Nothing more.  Mine did it to me just the other day.

 

Heck my anti-virus is even reporting my firewall as a virus now.

Edited March 21 by PhantomHans

[Archangel44]

2 hours ago, DCoffey said:

No your response was rude and shows your attitude with someone trying to help. 

Dude, he's not helping, he's complaining about Eagle Dynamics and their programmers. You wanna help, do something about it, complaining gets you nowhere.

I don't want to be dragged into someone's piss'n and moaning rant.

Wanna read what he said, while he quoted me letting others know that the fix worked? huh?

 

Here's what he wrote, with my commentary, in case you don't know how to scroll up a few comments.

"It's not a feat that I have to fix something on my own because of a defective product. (Proud man)... The library (.dll in the bin folder) should be fixed by the publisher. (Possibly true but still complaining).  I paid for the product and I would like to be able to use it fully." (I agree but don't drag me into it, I can piss and moan just fine by myself without yer help).

 

Well, Coffey...I'm too old to put up with likes of this crap. You would do well, to get out a dictionary, a thesaurus and learn to comprehend English. Yer welcome.

Edited March 21 by Archangel44
Speeling air-or

[SOLIDKREATE]

Okay guys I am home now. I need to eat first then I will make the video and post it here.

 

[sleighzy]

6 hours ago, scommander2 said:

Perhaps, we should close this thread since majority people are in another thread, or this issue has a workaround solution now. 

100% agree with this. All new posts raised for this exact same reason should be linked to the fix/workaround and immediately closed.

There are hundreds of these across numerous posts, Discords, and Reddit.

If only people could learn basic search skills. </rant>

[mazex]

A question to everyone here that seem to agree that this is a problem caused by the AV software and not ED. Do you have any other software where you experience similar problems with false positives multiple times per year? What do you think of the practice of encrypting executable code with VMProtect? Could that be causing it?

[BIGNEWY]

threads merged

[Hiob]

19 minutes ago, mazex said:

A question to everyone here that seem to agree that this is a problem caused by the AV software and not ED. Do you have any other software where you experience similar problems with false positives multiple times per year? What do you think of the practice of encrypting executable code with VMProtect? Could that be causing it?

Yes, just recently, after an update of defender, it suddenly flagged a harmless fan controlling software that was peacefully resting (unused) on my system, not doing anything bad at all.
Gave me a small heart attack for no reason. 

Counter question - how often did your AV sound an alarm and it was actually a proper thread? For me that count is zero for the last 10-15 years and maybe one for the last 20.

The real protection is habits not AVs. Mind the sources, don't open fishy emails (or at least don't click on any links), etc.....

I bet you a fortune that most of the poor folks that were hit by a ransomware attack had Defender (or some other even worse 3rd party AV) running.
 

Edited March 21 by Hiob

[CH4Pz]

Ive been getting this issue when trying to update the latest patch, its started flagging the F14.DLL as a virus and kills the update. Everyone on this thread says its Antivirus, but i only have defender installed, and i added DCS, DCS-MT & dcs-updater to my firewall (private only ticked, do i tick public too?). So i've uninstalled the F-14, and was able to get the update installed, and performed a slow repair, but at some point i will want to get the F14 installed again, any solutions?

[Hiob]

Just now, CH4Pz said:

Ive been getting this issue when trying to update the latest patch, its started flagging the F14.DLL as a virus and kills the update. Everyone on this thread says its Antivirus, but i only have defender installed, and i added DCS, DCS-MT & dcs-updater to my firewall (private only ticked, do i tick public too?). So i've uninstalled the F-14, and was able to get the update installed, and performed a slow repair, but at some point i will want to get the F14 installed again, any solutions?

Deactivate the real time protection of defender for the time being. You can re-activater it after the update is done.
(Though I usually deactivate it everytime I use DCS, to decrease any potential performance or loading time issues)

3 minutes ago, CH4Pz said:

Everyone on this thread says its Antivirus, but i only have defender installed, 

Defender IS Antivirus, just the most integrated into windows and one of the least offensive ones. Still causes the same issues from time to time. 

[Zabuzard]

7 minutes ago, CH4Pz said:

firewall (private only ticked, do i tick public too?).

The firewall is not the problem here. The firewall deals with which process is allowed to talk to the internet. But the issue here is that the Antivirus-part of your Defender decided that the F-14 DLL is a threat and quarantined (deleted) the file.

Tell your MS Defender to stop doing that (exclude the file or the folder from the virus scanning), then ensure you get back the deleted file (e.g. DCS repair) and then you should be good to go

[JG11Preusse]

Hi all,

last times i also got warning regarding heatblur files.

Just wated to install latest DCS patch and got these messages from windows 11 and DCS updater:

null

Former warnings:

null

null

null

Edited March 21 by JG11Preusse

[SOLIDKREATE]

YOU SET THE INBOUN/OUTBOUND RULES FOR THE ENTIRE EAGLE DYNAMICS FOLDER FOLDER!!!!! - I MISSPOKE IN THE VIDEO.

 

 

 

Edited March 21 by SOLIDKREATE

[Hiob]

Here we go again. That is like the 20th new Topic about the same issue.
Defender flagged and quaratined a false positive find. 
 

Make an exemption for all DCS-related folders and deactivate real-time protection during the download/installation of the patch. (If things are already messed up, make a slow repair).

[JG11Preusse]

Thx Hiob

[draconus]

25 minutes ago, SOLIDKREATE said:

 

You once again spread misinformation - firewall rules has nothing to do with the problem. The only thing worth from that video is at the 2 minute mark - the action part.

[BIGNEWY]

@SOLIDKREATE the firewall is not the problem and saying it is is not good information, it is purely antivirus reporting a false positive. 

thanks

 

[Czar66]

Oh no. Please everyone, DO NOT TURN OFF your Windows Firewall or Windows Defender. That's a bad idea.

Only do this. It is enough to never see this issue again. It is/was also standard on another simulator with some avionics modeling. Also the Windows Defender is wrongly flagging other open source projects that are checked for malware code:

1.     Make an Exclusion on the whole DCS root folder on your anti-virus, including Windows Defender.
2.     Do a repair.

Usual path for files and folder exclusion management (windows 11 in english):

1.     Search for "windows security" in the search bar
2.     Virus & Threat Protection
3.     At 'Virus & Threat Protection Settings', click on 'manage settings'
4.     Bottom of the page click on 'add or remove exclusions'
5.     Add the whole DCS root Folder.

This is it. Don't touch Windows Firewall.

 

[Mad Jack]

I was able to update DCS without issues a moment ago. Windows Defender seems to be updated.

[MAXsenna]

I was able to update DCS without issues a moment ago. Windows Defender seems to be updated.

Do you have exclusions?

Sent from my SM-A536B using Tapatalk

[Mad Jack]

3 hours ago, MAXsenna said:

Do you have exclusions?

Sent from my SM-A536B using Tapatalk
 

No, nothing

[MAXsenna]

No, nothing

Cool, that's amazing!

Sent from my SM-A536B using Tapatalk