teewhite7 Posted January 9 Posted January 9 Anyone have a solution for this? Can't move D:\Eagle dynamics\Eagle Dynamics\DCS World OpenBeta\_downloads\Mods/aircraft/F14/bin/F14-HeatblurCommon.dll to D:\Eagle dynamics\Eagle Dynamics\DCS World OpenBeta\Mods/aircraft/F14/bin/F14-HeatblurCommon.dll: (2) The system cannot find the file specified. Intel i9-10900K 3.7GHz RTX 2080 Super Windforce OC G. Skill Trident Z DDR4 3600MHz (128GB) Samsung 970 Evo Plus NVMe M.2 (2TB) HP Reverb G2,WINWING Super Taurus, Super libra, PTO & PCR panels
Rudel_chw Posted January 9 Posted January 9 1 minute ago, teewhite7 said: Anyone have a solution for this? add a folder exclusion on your antivirus, to keep it out of the DCS program folder. Afterwards perform a DCS repair to recover the file For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar Mobile: iPad Pro 12.9" of 256 GB
43rd VFW COBRA Posted January 9 Posted January 9 Hi there , today windows defender start marking F-14 module as trojan . I remove module and again install it and i cant finish instal because always it say cant finish work , folder contain virus . What should i do to finis it ?
razo+r Posted January 9 Posted January 9 It's a false positive. Try to exclude the F-14 folders from the anti virus or add DCS as a whole as an exception to it.
Tiger Lead Posted January 9 Posted January 9 The past 2 days, when I start DCS it tells me that my F-14 is not authorized and will be disabled. I purchased the module on 17 October 2018 and have had no such problems for more than 7 years. What gives? None of other modules purchased before and since have had any similar problems. Please advise, any help is appreciated. John
diego999 Posted January 9 Posted January 9 There is a particular file on the F-14 that triggers false positives on some AVs. Which one are you running? Run a repair on the game and check if the antivirus has deleted some files. What most usually do is to exclude DCS and saved games folder from the AV scan. 1
Tiger Lead Posted January 9 Posted January 9 (edited) Sadly, it's not my AV s/w that is saying that...it's DCS. A nice blue box when I log on saying it isn't authorized and will be disabled. All other modules and terrains remain active without issue. I'll run the repair on the games because, what can it hurt? Thanks for the advice. Edited January 9 by Tiger Lead clarity
razo+r Posted January 9 Posted January 9 1 minute ago, Tiger Lead said: Sadly, it's not my AV s/w that is saying that...it's DCS. A nice blue box when I log on saying it isn't authorized and will be disabled. All other modules and terrains remain active without issue. That blue box appears generally when a .dll file from the Module has been removed by your anti virus software. So like previously stated, check your anti virus for quarantined or deleted files. Restore them if necessary and then run a repair and check if it fixed it. 1
Tiger Lead Posted January 9 Posted January 9 Sorry, I'm not very computer literate, obviously. I did the repair which failed because the AV quarantined the "threat" file. I was able to put it back but now I'm struggling to figure out how to tell the AV to exclude the file/folder from scans. Thanks again.
razo+r Posted January 9 Posted January 9 6 minutes ago, Tiger Lead said: Sorry, I'm not very computer literate, obviously. I did the repair which failed because the AV quarantined the "threat" file. Yes, that's why you have to first exclude the file before you run a repair. 6 minutes ago, Tiger Lead said: I was able to put it back but now I'm struggling to figure out how to tell the AV to exclude the file/folder from scans. Thanks again. Google your anti virus software. I'm sure they have a website somewhere that also has a guide regarding excluding files from scans.
Czar Posted January 9 Posted January 9 1 hour ago, Tiger Lead said: Sorry, I'm not very computer literate, obviously. I did the repair which failed because the AV quarantined the "threat" file. I was able to put it back but now I'm struggling to figure out how to tell the AV to exclude the file/folder from scans. Thanks again. Hi, Tiger Lead. Do the following: Delete the file via the anti virus or remove it from quarantine. Make an Exclusion on the whole DCS root folder on your anti virus, including windows defender. Do a repair. Usual path for files and folder exclusion management (windows 11 in English): Search for "windows security" in the search bar Virus & Threat Protection At 'Virus & Threat Protection Settings', click on 'manage settings' Bottom of the page click on 'add or remove exclusions' Add the whole DCS root Folder. 1
Ce_Zeta Posted January 9 Posted January 9 (edited) Same issue here. Windows detected Trojan:Win32/Kepavll!rfn in F14-HeatblurCommon.dll and F14-Nextgen.dll Edited January 9 by Ce_Zeta [sIGPIC]http://i.imgur.com/YexElgV.jpg[/sIGPIC]
Rudel_chw Posted January 10 Posted January 10 2 hours ago, Ce_Zeta said: Same issue here. then the same answers and tips on the post above yours are valid for you too For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar Mobile: iPad Pro 12.9" of 256 GB
Zabuzard Posted January 10 Posted January 10 (edited) It happens to every user whose AV pulled the recent update. It has happened occasionally since years, it also happens to other modules, and it will keep happening in the future as well. There are multiple threads on the forum with details on why and how and everything. The fix though is always the same: * You get this error message from DCS because your AV deleted one of the modules files (DCS hence thinks you messed with the module and doesnt authorize it for use). * Go to your AV settings and add the respective file or at least the modules bin folder (or the entire module folder or just the entire DCS folder) to the list of exclusions * Now restore the deleted file, for example by running a DCS repair Sorry for the inconvenience but there is no way around it. And as said, it will happen again in the future. It happens around 3 times each year, to some modules more than others. Edited January 10 by Zabuzard 1 1
TheBiggerBass Posted January 10 Posted January 10 (edited) Unfortunately there seems no way how to exclude any other files than single app files (*.exe) from win11 firewall scanning. *.dll or complete folders are not accepted, at least I don't know how to do that. Edited January 10 by TheBiggerBass System: HP Z2 Tower, Win11 24H2, i9-14900K, 64GB RAM, 8TB SSD (M2) + 18TB HDD (Sata), GeForce RTX4070 TI Super 16GB VRAM, Samsung Odyssey 57" curved monitor (main screen) + BenQ 32" UW3270 (secondary screen), VKB Gunfighter Ultimate MK4 + S-TECS Throttle DCS: All terrains, allmost all modules, most user flyable mods - CA, WWII Assets
AdrianL Posted January 10 Posted January 10 (edited) 32 minutes ago, TheBiggerBass said: at least I don't know how to do that Goto: Virus & threat detection -> Manage settings (will be middle of the page) -> Exclusions (at the bottom of the page ) Edited January 10 by AdrianL 1 1
Nukenin Posted January 10 Posted January 10 Also starting a few days ago, the Windows 11 SmartAppControl started to block the F14-Nextgen.dll. I don' t know if other files are affected too, that' s just the one I saw in the message from SAC. Is there anything I can do to make the F-14 run again, without turning off SAC?
BluFinBima Posted January 10 Posted January 10 (edited) I think people are too accepting of advice to remove files from AV. In this instance, we have a single file from one module "F14-Nextgen.dll" causing **hopefully** a false positive AV detection. At this point, no other modules are seeing this so it is obviously possible to write a DCS module which does not trigger this AV detection. Just because a new level of AV flags a file does not mean that it is a false positive. @IronMike can you please confirm that HeatBlur does not have a dormant trojan in "F14-Nextgen.dll", and assuming that it is not a Trojan, can HeatBlur make changes to avoid a false positive for this Trojan? Edited January 10 by BluFinBima formatting and unsure whether the tagged user was actually tagged. 2 1 BlueFinBima Latest Helios Virtual Cockpit Team version of Helios can be found on Github BlueFinBima Helios YouTube
Rudel_chw Posted January 10 Posted January 10 54 minutes ago, BluFinBima said: I think people are too accepting of advice to remove files from AV. and too many people believe their antiviruses are infallible 3 For work: iMac mid-2010 of 27" - Core i7 870 - 6 GB DDR3 1333 MHz - ATI HD5670 - SSD 256 GB - HDD 2 TB - macOS High Sierra For Gaming: 34" Monitor - Ryzen 3600 - 32 GB DDR4 2400 - nVidia RTX2080 - SSD 1.25 TB - HDD 10 TB - Win10 Pro - TM HOTAS Cougar Mobile: iPad Pro 12.9" of 256 GB
TheBiggerBass Posted January 10 Posted January 10 vor 1 Stunde schrieb AdrianL: Goto: Virus & threat detection -> Manage settings (will be middle of the page) -> Exclusions (at the bottom of the page ) Thanks mate. Learned something new for me today. 1 System: HP Z2 Tower, Win11 24H2, i9-14900K, 64GB RAM, 8TB SSD (M2) + 18TB HDD (Sata), GeForce RTX4070 TI Super 16GB VRAM, Samsung Odyssey 57" curved monitor (main screen) + BenQ 32" UW3270 (secondary screen), VKB Gunfighter Ultimate MK4 + S-TECS Throttle DCS: All terrains, allmost all modules, most user flyable mods - CA, WWII Assets
Czar Posted January 10 Posted January 10 (edited) 5 hours ago, BluFinBima said: @IronMike can you please confirm that HeatBlur does not have a dormant trojan in "F14-Nextgen.dll", and assuming that it is not a Trojan, can HeatBlur make changes to avoid a false positive for this Trojan? It is the 3rd year in a row now, they have to say the same thing over and over again for the scared cats that trust Microsoft in everything. 5 hours ago, Nukenin said: Also starting a few days ago, the Windows 11 SmartAppControl started to block the F14-Nextgen.dll. I don' t know if other files are affected too, that' s just the one I saw in the message from SAC. Is there anything I can do to make the F-14 run again, without turning off SAC? Delete the file via the AV that's causing it -> Make an exception of the DCS root folder, no need to globally turn off anything (Edit: TIL what SAC is. SAC full of <profanity>. So yeah, disable that.) -> Repair DCS. Edited January 10 by Czar 1
MAXsenna Posted January 10 Posted January 10 Unfortunately there seems no way how to exclude any other files than single app files (*.exe) from win11 firewall scanning. *.dll or complete folders are not accepted, at least I don't know how to do that.I know you got your answer to fix it. But for the love of God for anyone else reading this in the future. Firewalls≠antivirus software. I'm just writing this because you're not the first, (and won't be the last). Cheers and enjoy your Saturday! Sent from my SM-A536B using Tapatalk 1
Nukenin Posted January 10 Posted January 10 vor 44 Minuten schrieb Czar: It is the 3rd year in a row now, they have to say the same thing over and over again for the scared cats that trust Microsoft in everything. Delete the file via the AV that's causing it -> Make an exception of the DCS root folder, no need to globally turn off anything -> Repair DCS. It doesn' t work like that with the SmartAppControl unfortunately ... you cannot enter exceptions and once you turn it off, you cannot turn it on again, unless you re-install Windows 11. So I would actually prefer a soluation that makes sure the file is accepted. I also wonder why there is only a few people actually having that issue with the SAC.
Recommended Posts