Previous Thread
Next Thread
Print Thread
Rate This Thread
Hop To
#4642669 - 02/16/24 11:02 PM AV Detection  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE
Hi,

I just bought WOTR and Installed It along with the v1.25 patch. While doing so, Kaspersky detected and eliminated two files. The Installation .exe, and WOTR/Toolboox.exe, along with a temp file I think. Please see below...

Sorry but It´s In Spanish, but I think you can make It out.

Hoy, 16/02/2024 22:41:37 C:\OBDSoftware\WOTR\Toolbox\WOTRToolBox.exe WOTRToolBox.exe C:\OBDSoftware\WOTR\Toolbox Archivo Copia de seguridad creada Se ha creado una copia de seguridad del objeto Copia de seguridad creada UDS:Trojan-Ransom.Win32.Gen.ahmt troyano Alta Exacta Setup/Uninstall WingsOverTheReich_V1.00.tmp C:\Users\Miguel\AppData\Local\Temp\is-KN8QU.tmp\WingsOverTheReich_V1.00.tmp C:\Users\Miguel\AppData\Local\Temp\is-KN8QU.tmp 8300 DESKTOP-*******\Miguel Usuario activo



Evento: Se ha creado una copia de seguridad del objeto
Usuario: DESKTOP ******* \Miguel
Tipo de usuario: Usuario activo
Nombre de aplicación: WingsOverTheReich_V1.00.tmp
Ruta de la aplicación: C:\Users\Miguel\AppData\Local\Temp\is-KN8QU.tmp
Componente: Antivirus de archivos
Descripción del resultado: Copia de seguridad creada
Tipo: troyano
Nombre: UDS:Trojan-Ransom.Win32.Gen.ahmt
Precisión: Exacta


[Linked Image]

[img]https://postimg.cc/rKV72PNy[/img]

Please advise, thank you.

Red


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.
#4642670 - 02/16/24 11:07 PM Re: AV Detection [Re: RedOneAlpha]  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.
#4642671 - 02/17/24 01:03 AM Re: AV Detection [Re: RedOneAlpha]  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE
Yet another one while trying to scan with another AV, but this time Kaspersky deleted my WOTR desktop Icon, and If I try to launch from within the WOTR folder It gives me fatal error.

[Linked Image]

I haven´t even seen how the sim looks like except the main menu LOL. We ain´t getting no where like this!

Red


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.
#4642672 - 02/17/24 01:17 AM Re: AV Detection [Re: RedOneAlpha]  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE
From reading section 7 of the FAQ, I presume all these are false positives, so I´ll re-Install WOTR tomorrow and turn off my AV while Installing and exclude the main WORT folder In my AV.

Darn AV´s give me a headache!

PS.: The problem now Is that WOTR does not show up In my Control Panel, only the patch so I can´t unInstall It from there. I do have Revo Uninstaller Pro and I can force the unInstall with that, will see tomorrow off to sleep now...


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.
#4642681 - 02/17/24 09:14 AM Re: AV Detection [Re: RedOneAlpha]  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE
Update...

All working fine and dandi as they say!

[Linked Image]

Cheers


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.
#4642775 - 02/19/24 12:01 PM Re: AV Detection [Re: RedOneAlpha]  
Joined: Mar 2003
Posts: 8,148
Polovski Offline
Polovski  Offline

Hotshot

Joined: Mar 2003
Posts: 8,148
Sorry only just saw this, thanks for reporting but yes, as always, a false positive! WOFFToolbox, WOTRToolbox are often flagged falsely as they are able to clean the WOFF/WOTR registry etc.

As per the FAQ please report any virus detection as a false positive to your AV company - they all have a website or facility to report false positives.

Last edited by Polovski; 02/19/24 12:02 PM.

Regards,

Polovski,
OBD Software, developers of immersive flight sims;
Wings Over Flanders Fields and Wings Over The Reich
http://www.overflandersfields.com
http://www.wingsoverthereich.com
#4642796 - 02/19/24 11:17 PM Re: AV Detection [Re: Polovski]  
Joined: Jun 2017
Posts: 3,831
RedOneAlpha Online content
Senior Member
RedOneAlpha  Online Content
Senior Member

Joined: Jun 2017
Posts: 3,831
LEGE
Originally Posted by Polovski
Sorry only just saw this, thanks for reporting but yes, as always, a false positive! WOFFToolbox, WOTRToolbox are often flagged falsely as they are able to clean the WOFF/WOTR registry etc.

As per the FAQ please report any virus detection as a false positive to your AV company - they all have a website or facility to report false positives.


Yes will do thanks.


Win10 Pro(x64), i7 8700k @ 4.7Ghz, 32GB ram DDR4, Sapphire Pulse AMD RX 6700 12GB, M.2 PCIe NVMe (x2) 480GB + 960GB, 447GB SSD´s, Samsung G6 32" , Logitech G13, G502, Warthog HOTAS, CH Pedals, Simagic Alpha Mini, and Formula Extreme FX, DC Simracing DC1 pedals, GT Omega ART cockpit, TrackIR 5.0.
AUDIO: Aiyima A07 Max, Topping E50 and L50 stack, Polk Audio Signature Elite ES20 , and Shennheiser HD 560s. DAP: Hiby R3, Hiby Seeds, and iBasso IT01, Sharp MD-MT 80H Minidisc.

Moderated by  Polovski 

Quick Search
Recent Articles
Support SimHQ

If you shop on Amazon use this Amazon link to support SimHQ
.
Social


Recent Topics
Actors portraying US Presidents
by PanzerMeyer. 04/19/24 12:19 PM
Dickey Betts was 80
by Rick_Rawlings. 04/19/24 01:11 AM
Exodus
by RedOneAlpha. 04/18/24 05:46 PM
Grumman Wildcat unique landing gear
by Coot. 04/17/24 03:54 PM
Peter Higgs was 94
by Rick_Rawlings. 04/17/24 12:28 AM
Whitey Herzog was 92
by F4UDash4. 04/16/24 04:41 PM
Anyone can tell me what this is?
by NoFlyBoy. 04/16/24 04:10 PM
10 Years ago MV Sewol
by wormfood. 04/15/24 08:25 PM
Pride Of Jenni race win
by NoFlyBoy. 04/15/24 12:22 AM
Copyright 1997-2016, SimHQ Inc. All Rights Reserved.

Powered by UBB.threads™ PHP Forum Software 7.6.0