Dudester22 Posted January 15, 2014 Posted January 15, 2014 (edited) I have downloaded some Mods and am just wondering if this is a false positive or a virus? Double click with your mouse wheel to get a closer look. Thanks! Edited January 15, 2014 by Dudester22
joey45 Posted January 15, 2014 Posted January 15, 2014 What were the mods? The only way to make sense out of change is to plunge into it, move with it, and join the dance. "Me, the 13th Duke of Wybourne, here on the ED forums at 3 'o' clock in the morning, with my reputation. Are they mad.." https://ko-fi.com/joey45
Dudester22 Posted January 15, 2014 Author Posted January 15, 2014 (edited) What were the mods? Terrain, Sound, Cockpit. Why? Do you think it's a virus? Don't want to delete them if they are going to mess up my game and are just false positives. Edited January 15, 2014 by Dudester22
SkateZilla Posted January 15, 2014 Posted January 15, 2014 (edited) VCRedist.exe is the Visual C+ Runtime Re-Distributable Runtime Install Package, that Installs the required Updated Visual C+ Runtimes to Run DCS World, False Positive. Turn off Anti-Virus RealTime Protection/Scanners when Installing Major Applications or System Updates. I Had AVG and MalwareBytes both come back and Say that I had EXE and DLLs that were Severe Level Trojans, when In fact they were part of legit MS Windows Updates. Companies have their Anti-Virus/Malware/Spyware Programs Set to flag anything because there are alot of "InExperienced" Users out there that simply dont know what they are doing, so it flags everything that alters the system files as a Threat to keep them from running it. PS.. You should not be installing mods into the 1.2.7 beta. Edited January 15, 2014 by SkateZilla Windows 10 Pro, Ryzen 2700X @ 4.6Ghz, 32GB DDR4-3200 GSkill (F4-3200C16D-16GTZR x2), ASRock X470 Taichi Ultimate, XFX RX6800XT Merc 310 (RX-68XTALFD9) 3x ASUS VS248HP + Oculus HMD, Thrustmaster Warthog HOTAS + MFDs
Dudester22 Posted January 15, 2014 Author Posted January 15, 2014 VCRedist.exe is the Visual C+ Runtime Re-Distributable Runtime Install Package, that Installs the required Updated Visual C+ Runtimes to Run DCS World, False Positive. Turn off Anti-Virus RealTime Protection/Scanners when Installing Major Applications or System Updates. I Had AVG and MalwareBytes both come back and Say that I had EXE and DLLs that were Severe Level Trojans, when In fact they were part of legit MS Windows Updates. Companies have their Anti-Virus/Malware/Spyware Programs Set to flag anything because there are alot of "InExperienced" Users out there that simply dont know what they are doing, so it flags everything that alters the system files as a Threat to keep them from running it. PS.. You should not be installing mods into the 1.2.7 beta. Thanks for the heads up. I haven't installed Mods to the 1.27 beta, I only installed them to 1.26. 1
Jimbolya Posted January 16, 2014 Posted January 16, 2014 Skate is right. However, viruses do attack your .dll files and what not and those programs are running off of behavioral analytics; so, when something goes to change at .dll it looks like a virus. You have to consider the source for sure.
gregecslo Posted January 16, 2014 Posted January 16, 2014 Browse for file and paste it here: http://www.virustotal.com This will give you if it is FP or not...
gregecslo Posted January 16, 2014 Posted January 16, 2014 I have this file too, but its clean, so be very careful about it :) https://www.virustotal.com/en/file/681be3e5ba9fd3da02c09d7e565adfa078640ed66a0d58583efad2c1e3cc4064/analysis/1389889938/
Vedexent Posted January 16, 2014 Posted January 16, 2014 PS.. You should not be installing mods into the 1.2.7 beta. Is this because it invalidates any 1.2.7 bug reports (which is the point of the open beta) because it's not possible to tell which is a 1.2.7 issues, which is a mod issue, and which is a core<->mod interaction issue - or is there a reason beyond that?
Oznerol256 Posted January 16, 2014 Posted January 16, 2014 Is this because it invalidates any 1.2.7 bug reports (which is the point of the open beta) because it's not possible to tell which is a 1.2.7 issues, which is a mod issue, and which is a core<->mod interaction issue - or is there a reason beyond that? No there isn't another reason. So you can use mods in 1.2.7 but you shouldn't post bug reports then. Of course you can still uninstall the mods once you discovered a bug to make sure the problem lies in vanilla DCS. [sIGPIC][/sIGPIC]
sobek Posted January 18, 2014 Posted January 18, 2014 Cmon gents, leave the bickering. Good, fast, cheap. Choose any two. Come let's eat grandpa! Use punctuation, save lives!
Gerg Posted January 18, 2014 Posted January 18, 2014 (edited) Strange Malwarebytes is flagging it as its a common file. In Windows if you right click the file and goto properties, does it have a MS signing certificate and is valid? Yea something like this happened few years ago with Flame malware forging Windows Update certificates and using them to push malware infections to pc's through Windows Update. This issue was in Windows for 10+ years before MS patched it and anyone that stumbled on it had years of lulz opportunity. Although its a bit silly to not run a A/V since all it take is some dodgy malware infected ad on some site and your pc is infected. Not using Internet Explorer and using an adblocker is probs best way to stay clean but java or flash needed in every browser isnt exactly secure from exploits eiter. Edited January 18, 2014 by Gerg
Recommended Posts