Previous Thread
Next Thread
Print Thread
Rate This Thread
Hop To
Page 1 of 2 1 2
#4310691 - 11/10/16 02:42 AM Kaspersky Deleted WOFFToolbox.exe  
Joined: Jan 2008
Posts: 366
BirdDogICT Offline
Member
BirdDogICT  Offline
Member

Joined: Jan 2008
Posts: 366
FYI,

Kaspersky Internet Security quarantined and then deleted WOFFToolbox.exe, indicating that it contained
the following virus: Trojan-Ransom.Win32.Gen.lc

This occurred the day after installing UE Patch 4.05. I was unable to restore it from quarantine, Kaspersky won't allow it. Not having any luck flagging this as a trusted application in Kaspersky, either.

Thought you'd like to know.


There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.

— Tom Wolfe, The Right Stuff,1979.
#4310722 - 11/10/16 06:34 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jul 2010
Posts: 2,079
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 2,079
Czech Rep.
False warning - check this thread:
Link
Pol have already sent info to Kaspersky.
You can freely install it without worrying. Try disable AV first and then create exception for OBD Software folder in AV.

Last edited by JJJ65; 11/10/16 06:36 AM.
#4310783 - 11/10/16 01:32 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: JJJ65]  
Joined: Jan 2008
Posts: 366
BirdDogICT Offline
Member
BirdDogICT  Offline
Member

Joined: Jan 2008
Posts: 366
Thanks JJJ65, I knew it was a false positive...just couldn't find a thread about it late at night after working a 12-hour shift.

I manually made OBD Software a trusted application in Kaspersky, but still had to turn Kaspersky off to reinstall UE Patch 4.05. Not a big problem, just annoying late at night after a long day at work when all I want to do is enjoy a beer or two and fly.

I remember when PCs were fun. Like when we had to add a Voodoo card to our 2D cards to fly. And create custom Expanded Memory and High Memory profiles for every flight sim. And use Thrustmaster programming software. Not to mention every buggy windows upgrade. Now that I think about it, never mind.


Last edited by BirdDogICT; 11/10/16 02:10 PM.

There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.

— Tom Wolfe, The Right Stuff,1979.
#4310861 - 11/10/16 05:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 8,138
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 8,138
52 Virus Scanners found it all clear including Eset NOD32, Ad-Aware AVG, Avast, Avira, Komodo, McAfee, Panda, Sofos, Symantec, Trend Micro, BitDefender, MalwareBytes, F-Prot, F-Secure, and a load more on virustotal.com

Only 4 didn't like the file (including Kaspersky and 3 obscure ones). They each found a different virus biggrin so we are fine.

Yeah Birddog I rem that too, fiddling with high memory to get something like 614k free to fly Falcon 3 or whatever it was. Almost impossible smile


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4313643 - 11/20/16 12:04 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 8,138
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 8,138
Anyone still having issues with false detections from any AV, install 4.06 or higher - this is recompiled and has a different signature which seems to have helped in this regard.


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4313650 - 11/20/16 12:13 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,743
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,743
Yeah, no problems with 4.06.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4313657 - 11/20/16 12:58 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: Polovski]  
Joined: Jul 2010
Posts: 2,079
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 2,079
Czech Rep.
Yep, ESET NOD32 deleted Toolbox.exe after AV database update on last Wednesday. It was OK before (until Wednesday).
Since I know it is false warning I removed the file from AV vault, placed it back and set exception to xx:/OBD Software/ path.

Last edited by JJJ65; 11/20/16 01:03 PM.
#4313683 - 11/20/16 02:57 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Nov 2014
Posts: 3,696
Fullofit Offline
Senior Member
Fullofit  Offline
Senior Member

Joined: Nov 2014
Posts: 3,696
Ajax, ON
So that's where my toolbox.exe went. I've been looking for it all day yesterday.


"Take the cylinder out of my kidneys,
The connecting rod out of my brain, my brain,
From out of my arse take the camshaft,
And assemble the engine again."
#4313932 - 11/21/16 02:05 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,743
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,743
The Toolbox.exe problem seems to have returned with patch 4.07.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4314023 - 11/21/16 06:41 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
I'm getting it now after installing 4.06

#4314026 - 11/21/16 06:44 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
...and KIS17 is now also blocking installation of 4.07

#4314196 - 11/22/16 10:58 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 8,138
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 8,138
Hmm nuts, Toolbox was updated a few versions back just for better UE compatibilty.

We did send that exact exe to Kaspersky, not heard back from them. Maybe someone else can report it as a false positive too?


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4314235 - 11/22/16 12:49 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,743
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,743
I've already done it. Hopefully they'll fix it.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4314250 - 11/22/16 01:50 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 8,138
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 8,138
Just heard from them (had to contact them again)


"Sorry, it was a false detection. It will be fixed.
Thank you for your help.

Best regards,
Herman Moskalenko, Malware Analyst, Kaspersky Lab"

So good news


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4314470 - 11/23/16 07:34 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
Thx Pol.

All good now.

R

#4314678 - 11/23/16 08:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jan 2014
Posts: 20
Nefilim57 Offline
Junior Member
Nefilim57  Offline
Junior Member

Joined: Jan 2014
Posts: 20
For info I had the same issue with my Avira pro today

TR/DelFile.uvamy detected inside WOFFToolBox.exe nope

#4314681 - 11/23/16 08:42 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jul 2010
Posts: 2,079
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 2,079
Czech Rep.
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.

#4314828 - 11/24/16 11:13 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: JJJ65]  
Joined: Nov 2001
Posts: 1,485
Winding Man Offline
Member
Winding Man  Offline
Member

Joined: Nov 2001
Posts: 1,485
Jhb, South Africa
Originally Posted By: JJJ65
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.


It always has yet only now its become an issue....???
Anyway hopefully they will all get updated over time to ignore it.

WM


OBD Software
#4314844 - 11/24/16 12:23 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: Winding Man]  
Joined: Jul 2010
Posts: 2,079
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 2,079
Czech Rep.
Originally Posted By: Winding Man
Originally Posted By: JJJ65
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.


It always has yet only now its become an issue....???
Anyway hopefully they will all get updated over time to ignore it.

WM

You are right. Maybe some new virus has similar signature to your Toolbox.exe?

#4314847 - 11/24/16 12:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,743
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,743
So far no problems with Kaspersky and the latest patch. They must have fixed the problem.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
Page 1 of 2 1 2

Moderated by  Polovski 

Quick Search
Recent Articles
Support SimHQ

If you shop on Amazon use this Amazon link to support SimHQ
.
Social


Recent Topics
Carnival Cruise Ship Fire....... Again
by F4UDash4. 03/26/24 05:58 PM
Baltimore Bridge Collapse
by F4UDash4. 03/26/24 05:51 PM
The Oldest WWII Veterans
by F4UDash4. 03/24/24 09:21 PM
They got fired after this.
by Wigean. 03/20/24 08:19 PM
Grown ups joke time
by NoFlyBoy. 03/18/24 10:34 PM
Anyone Heard from Nimits?
by F4UDash4. 03/18/24 10:01 PM
RIP Gemini/Apollo astronaut Tom Stafford
by semmern. 03/18/24 02:14 PM
10 years after 3/8/2014
by NoFlyBoy. 03/17/24 10:25 AM
Copyright 1997-2016, SimHQ Inc. All Rights Reserved.

Powered by UBB.threads™ PHP Forum Software 7.6.0