Previous Thread
Next Thread
Print Thread
Rate This Thread
Hop To
Page 1 of 2 1 2
#4310691 - 11/10/16 02:42 AM Kaspersky Deleted WOFFToolbox.exe  
Joined: Jan 2008
Posts: 364
BirdDogICT Offline
Member
BirdDogICT  Offline
Member

Joined: Jan 2008
Posts: 364
FYI,

Kaspersky Internet Security quarantined and then deleted WOFFToolbox.exe, indicating that it contained
the following virus: Trojan-Ransom.Win32.Gen.lc

This occurred the day after installing UE Patch 4.05. I was unable to restore it from quarantine, Kaspersky won't allow it. Not having any luck flagging this as a trusted application in Kaspersky, either.

Thought you'd like to know.


There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.

— Tom Wolfe, The Right Stuff,1979.
#4310722 - 11/10/16 06:34 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jul 2010
Posts: 1,786
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 1,786
Czech Rep.
False warning - check this thread:
Link
Pol have already sent info to Kaspersky.
You can freely install it without worrying. Try disable AV first and then create exception for OBD Software folder in AV.

Last edited by JJJ65; 11/10/16 06:36 AM.
#4310783 - 11/10/16 01:32 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: JJJ65]  
Joined: Jan 2008
Posts: 364
BirdDogICT Offline
Member
BirdDogICT  Offline
Member

Joined: Jan 2008
Posts: 364
Thanks JJJ65, I knew it was a false positive...just couldn't find a thread about it late at night after working a 12-hour shift.

I manually made OBD Software a trusted application in Kaspersky, but still had to turn Kaspersky off to reinstall UE Patch 4.05. Not a big problem, just annoying late at night after a long day at work when all I want to do is enjoy a beer or two and fly.

I remember when PCs were fun. Like when we had to add a Voodoo card to our 2D cards to fly. And create custom Expanded Memory and High Memory profiles for every flight sim. And use Thrustmaster programming software. Not to mention every buggy windows upgrade. Now that I think about it, never mind.


Last edited by BirdDogICT; 11/10/16 02:10 PM.

There are no accidents and no fatal flaws in the machines; there are only pilots with the wrong stuff.

— Tom Wolfe, The Right Stuff,1979.
#4310861 - 11/10/16 05:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 6,660
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 6,660
52 Virus Scanners found it all clear including Eset NOD32, Ad-Aware AVG, Avast, Avira, Komodo, McAfee, Panda, Sofos, Symantec, Trend Micro, BitDefender, MalwareBytes, F-Prot, F-Secure, and a load more on virustotal.com

Only 4 didn't like the file (including Kaspersky and 3 obscure ones). They each found a different virus biggrin so we are fine.

Yeah Birddog I rem that too, fiddling with high memory to get something like 614k free to fly Falcon 3 or whatever it was. Almost impossible smile


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4313643 - 11/20/16 12:04 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 6,660
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 6,660
Anyone still having issues with false detections from any AV, install 4.06 or higher - this is recompiled and has a different signature which seems to have helped in this regard.


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4313650 - 11/20/16 12:13 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,733
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,733
Yeah, no problems with 4.06.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4313657 - 11/20/16 12:58 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: Polovski]  
Joined: Jul 2010
Posts: 1,786
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 1,786
Czech Rep.
Yep, ESET NOD32 deleted Toolbox.exe after AV database update on last Wednesday. It was OK before (until Wednesday).
Since I know it is false warning I removed the file from AV vault, placed it back and set exception to xx:/OBD Software/ path.

Last edited by JJJ65; 11/20/16 01:03 PM.
#4313683 - 11/20/16 02:57 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Nov 2014
Posts: 2,583
Fullofit Online content
Senior Member
Fullofit  Online Content
Senior Member

Joined: Nov 2014
Posts: 2,583
Ajax, ON
So that's where my toolbox.exe went. I've been looking for it all day yesterday.


"Take the cylinder out of my kidneys,
The connecting rod out of my brain, my brain,
From out of my arse take the camshaft,
And assemble the engine again."
#4313932 - 11/21/16 02:05 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,733
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,733
The Toolbox.exe problem seems to have returned with patch 4.07.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4314023 - 11/21/16 06:41 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
I'm getting it now after installing 4.06

#4314026 - 11/21/16 06:44 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
...and KIS17 is now also blocking installation of 4.07

#4314196 - 11/22/16 10:58 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 6,660
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 6,660
Hmm nuts, Toolbox was updated a few versions back just for better UE compatibilty.

We did send that exact exe to Kaspersky, not heard back from them. Maybe someone else can report it as a false positive too?


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4314235 - 11/22/16 12:49 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,733
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,733
I've already done it. Hopefully they'll fix it.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
#4314250 - 11/22/16 01:50 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Mar 2003
Posts: 6,660
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 6,660
Just heard from them (had to contact them again)


"Sorry, it was a false detection. It will be fixed.
Thank you for your help.

Best regards,
Herman Moskalenko, Malware Analyst, Kaspersky Lab"

So good news


Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4314470 - 11/23/16 07:34 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Oct 2011
Posts: 191
Russkly Offline
Member
Russkly  Offline
Member

Joined: Oct 2011
Posts: 191
Vienna, Austria
Thx Pol.

All good now.

R

#4314678 - 11/23/16 08:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jan 2014
Posts: 19
Nefilim57 Offline
Junior Member
Nefilim57  Offline
Junior Member

Joined: Jan 2014
Posts: 19
For info I had the same issue with my Avira pro today

TR/DelFile.uvamy detected inside WOFFToolBox.exe nope

#4314681 - 11/23/16 08:42 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: Jul 2010
Posts: 1,786
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 1,786
Czech Rep.
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.

#4314828 - 11/24/16 11:13 AM Re: Kaspersky Deleted WOFFToolbox.exe [Re: JJJ65]  
Joined: Nov 2001
Posts: 1,436
Winding Man Offline
Member
Winding Man  Offline
Member

Joined: Nov 2001
Posts: 1,436
Jhb, South Africa
Originally Posted By: JJJ65
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.


It always has yet only now its become an issue....???
Anyway hopefully they will all get updated over time to ignore it.

WM


OBD Software
#4314844 - 11/24/16 12:23 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: Winding Man]  
Joined: Jul 2010
Posts: 1,786
JJJ65 Online cool
Member
JJJ65  Online Cool
Member

Joined: Jul 2010
Posts: 1,786
Czech Rep.
Originally Posted By: Winding Man
Originally Posted By: JJJ65
I think that all good antiviruses must detect a Toolbox.exe as malicious application, because it accesses and delete some (although OBD Software) windows registry keys and such activity can not be left unnoticed.


It always has yet only now its become an issue....???
Anyway hopefully they will all get updated over time to ignore it.

WM

You are right. Maybe some new virus has similar signature to your Toolbox.exe?

#4314847 - 11/24/16 12:31 PM Re: Kaspersky Deleted WOFFToolbox.exe [Re: BirdDogICT]  
Joined: May 2012
Posts: 1,733
Hasse Offline
Member
Hasse  Offline
Member

Joined: May 2012
Posts: 1,733
So far no problems with Kaspersky and the latest patch. They must have fixed the problem.


"Upon my word I've had as much excitement on a car as in the air, especially since the R.F.C. have had women drivers."

James McCudden, Five Years in the Royal Flying Corps
Page 1 of 2 1 2

Moderated by  Polovski 

Quick Search
Recent Articles
Support SimHQ

If you shop on Amazon use this Amazon link to support SimHQ
.
Social


Recent Topics
Just a little feel good flying thing
by Nixer. 02/18/20 12:37 AM
Now, This is Cool (Even if it WAS a Dog)
by vonBaur. 02/18/20 12:37 AM
HITMAN 2, et al
by DBond. 02/17/20 01:52 PM
I didn't know this. Women Top Guns.
by NoFlyBoy. 02/17/20 03:46 AM
Betelgeuse
by Red2112. 02/16/20 11:35 PM
Heck just a good jam
by rwatson. 02/16/20 01:57 PM
EPIC Games = epic PITA
by Dunolde. 02/15/20 09:05 PM
WWII Nose Art
by F4UDash4. 02/15/20 01:25 AM
weird ads i only see at Simhq
by Ajay. 02/15/20 12:53 AM
Copyright 1997-2016, SimHQ Inc. All Rights Reserved.

Powered by UBB.threads™ PHP Forum Software 7.6.0