#4310691 - 11/10/16 02:42 AM
Kaspersky Deleted WOFFToolbox.exe
|
Joined: Jan 2008
Posts: 366
BirdDogICT
Member
|
Member
Joined: Jan 2008
Posts: 366
|
FYI,
Kaspersky Internet Security quarantined and then deleted WOFFToolbox.exe, indicating that it contained the following virus: Trojan-Ransom.Win32.Gen.lc
This occurred the day after installing UE Patch 4.05. I was unable to restore it from quarantine, Kaspersky won't allow it. Not having any luck flagging this as a trusted application in Kaspersky, either.
Thought you'd like to know.
There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.
— Tom Wolfe, The Right Stuff,1979.
|
|
|
#4310722 - 11/10/16 06:34 AM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: BirdDogICT]
|
Joined: Jul 2010
Posts: 2,079
JJJ65
Member
|
Member
Joined: Jul 2010
Posts: 2,079
Czech Rep.
|
False warning - check this thread: Link Pol have already sent info to Kaspersky. You can freely install it without worrying. Try disable AV first and then create exception for OBD Software folder in AV.
Last edited by JJJ65; 11/10/16 06:36 AM.
|
|
|
#4310783 - 11/10/16 01:32 PM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: JJJ65]
|
Joined: Jan 2008
Posts: 366
BirdDogICT
Member
|
Member
Joined: Jan 2008
Posts: 366
|
Thanks JJJ65, I knew it was a false positive...just couldn't find a thread about it late at night after working a 12-hour shift.
I manually made OBD Software a trusted application in Kaspersky, but still had to turn Kaspersky off to reinstall UE Patch 4.05. Not a big problem, just annoying late at night after a long day at work when all I want to do is enjoy a beer or two and fly.
I remember when PCs were fun. Like when we had to add a Voodoo card to our 2D cards to fly. And create custom Expanded Memory and High Memory profiles for every flight sim. And use Thrustmaster programming software. Not to mention every buggy windows upgrade. Now that I think about it, never mind.
Last edited by BirdDogICT; 11/10/16 02:10 PM.
There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.
— Tom Wolfe, The Right Stuff,1979.
|
|
|
#4310861 - 11/10/16 05:31 PM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: BirdDogICT]
|
Joined: Mar 2003
Posts: 8,149
Polovski
|
Hotshot
Joined: Mar 2003
Posts: 8,149
|
52 Virus Scanners found it all clear including Eset NOD32, Ad-Aware AVG, Avast, Avira, Komodo, McAfee, Panda, Sofos, Symantec, Trend Micro, BitDefender, MalwareBytes, F-Prot, F-Secure, and a load more on virustotal.com Only 4 didn't like the file (including Kaspersky and 3 obscure ones). They each found a different virus so we are fine. Yeah Birddog I rem that too, fiddling with high memory to get something like 614k free to fly Falcon 3 or whatever it was. Almost impossible
|
|
|
#4313657 - 11/20/16 12:58 PM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: Polovski]
|
Joined: Jul 2010
Posts: 2,079
JJJ65
Member
|
Member
Joined: Jul 2010
Posts: 2,079
Czech Rep.
|
Yep, ESET NOD32 deleted Toolbox.exe after AV database update on last Wednesday. It was OK before (until Wednesday). Since I know it is false warning I removed the file from AV vault, placed it back and set exception to xx:/OBD Software/ path.
Last edited by JJJ65; 11/20/16 01:03 PM.
|
|
|
#4313683 - 11/20/16 02:57 PM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: BirdDogICT]
|
Joined: Nov 2014
Posts: 3,696
Fullofit
Senior Member
|
Senior Member
Joined: Nov 2014
Posts: 3,696
Ajax, ON
|
So that's where my toolbox.exe went. I've been looking for it all day yesterday.
"Take the cylinder out of my kidneys, The connecting rod out of my brain, my brain, From out of my arse take the camshaft, And assemble the engine again."
|
|
|
#4314828 - 11/24/16 11:13 AM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: JJJ65]
|
Joined: Nov 2001
Posts: 1,485
Winding Man
Member
|
Member
Joined: Nov 2001
Posts: 1,485
Jhb, South Africa
|
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed. It always has yet only now its become an issue....??? Anyway hopefully they will all get updated over time to ignore it. WM
OBD Software
|
|
|
#4314844 - 11/24/16 12:23 PM
Re: Kaspersky Deleted WOFFToolbox.exe
[Re: Winding Man]
|
Joined: Jul 2010
Posts: 2,079
JJJ65
Member
|
Member
Joined: Jul 2010
Posts: 2,079
Czech Rep.
|
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed. It always has yet only now its become an issue....??? Anyway hopefully they will all get updated over time to ignore it. WM You are right. Maybe some new virus has similar signature to your Toolbox.exe?
|
|
|
|
|
|
|
|
|
|
|
|
|
Exodus
by RedOneAlpha. 04/18/24 05:46 PM
|
|
|