Testupdater = virus?


Rothb

 

Posted

I launched the test-updater (it worked fine YESTERDAY) and my Nod32 is detecting a virus.

File:
D:\Games\City of Heroes - test\CoHTest\tempfile

Threat: probably unknown NewHeur_PE virus


It puts the file into quaratine but it pops up everytime so I can't actually access the test server anymore... The "tempfile" is hidden for me and searching the "City of Heroes-test" for virus isn't showing anything.

What could be the problem and how do I fix it?

Thanks


 

Posted

Sounds like a false positive - the program thinks "oh, this thing can connect to the Internet and download files, IT MUST BE SOME NEW VIRUS". See if you can find a "ignore" or "add to exceptions" option.




Character index

 

Posted

I read some about the virus and it seems to affect MP3-players/USB-sticks. Not sure what to do tbh, can't find a "skip" option...


 

Posted

When the NOD32 message pops and I close it down a "updater - file error" message pops up, it says the following:


checksum failed on D:\Games\City of Heroes - test\Cohtest\cityofheroes.exe
Click ok to do checksum of all files.

You may be out of diskspace or you may be trying to install to a location where you have insufficent permissions.

I doubt the above is correct, but if so how do I know this? How can I solve my problem?

If I click "OK", the updater restarts the patching and the same thing happens over and over again... I can also click Cancel which closes the updater.


 

Posted

Try verifying all files? If something IS wrong with it that should fix it.


 

Posted

Quote:
Originally Posted by Shadowclone View Post
Try verifying all files? If something IS wrong with it that should fix it.
I could never get that far as it started updating right away. Anyhow, I fixed it by deactivating my antivirus while updating. I'm now on the test-server again. Thanks!


 

Posted

It's not a virus, it's a falso positive.

I'm not familiar with all the workings of NOD32, but it should have an exception list. You should set the cohupdater.exe (at the very least) in the exceptions, both for your Test install and the Live install. I have the entire directory for both installs set in the exceptions for my A/V program and run a separate scan on them from time to time having it ignore the cohupdater.exe file.

If you set the exceptions now, you won't have this problem in the future. And, your A/V may detect it as a virus during a scan and delete it anyway.

Also, you should contact the manufacturer of the A/V program and let them know about the false positive and insist that they fix their product. You do pay for it after all.


If the game spit out 20 dollar bills people would complain that they weren't sequentially numbered. If they were sequentially numbered people would complain that they weren't random enough.

Black Pebble is my new hero.