Attempting update to 2.5.6.59398 and errors due to Virus?

[Nommingu]

Hi all,

 

I've been attempting to update my game via the DCS Updater/Launcher and it keeps erroring on one of the sound files saying it's a virus.

 

Anyone else had this problem?

 

Any ideas how to fix it?

 

Thanks!

[Rudel_chw]

2 minutes ago, Nommingu said:

Any ideas how to fix it?

 

i solved this Kind of  issues, adding the DCS folders to the exclusion list of my AV .. not only I never got anymore false positives, but I feel it reduces stuttering as well.

[insego]

Quote

Anyone else had this problem?

Yes, having the same problem with a new (beta) install with the web installer. The beta installer tries updating and stops with the message that there might be a virus in the file "\DCS World OpenBeta\_downloads\Sounds.edc/23/23dfd88b13390df2b334ffa114afdd77f7f6cb86ed0848e55dccdfed69619031.downloading.652958c8d81280a6".
Tried the regular installer next, it does not have this problem.

Maybe we should report the file as a false positive.

Edited December 21, 2020 by insego

[insego]

No virusscanner at "VirusTotal.com" detects this file as a virus. I reported this to Microsoft as a false positive.

Workaround at the moment is temporarily creating an exclusion in Microsoft Defender Antivirus for the file type (file extension) "652958c8d81280a6". This is the last part of the downloaded (file)name after the last dot. It's not nescessary to disable scanning of the complete DCS-folder. After the download is complete, the exclusion can be removed.

 

[Jhin4]

On 12/21/2020 at 6:29 AM, Rudel_chw said:

i solved this Kind of  issues, adding the DCS folders to the exclusion list of my AV .. not only I never got anymore false positives, but I feel it reduces stuttering as well.

please explain with much detail for me because I having the same issue and I don’t understand what you are saying in the fix

[Rudel_chw]

5 hours ago, Jhin4 said:

please explain with much detail for me because I having the same issue and I don’t understand what you are saying in the fix

every antivirus is different, but all of them allow you to exclude From their action parts of your file system. What I suggested was to exclude the part where DCS is stored (usually C:/program files/Eagle dynamics/ ). Look on your antivirus documentation for "exclusions" to learn how they are done on your specific antivirus.

[Buzzer1977]

On 12/21/2020 at 12:25 PM, Nommingu said:

Hi all,

 

I've been attempting to update my game via the DCS Updater/Launcher and it keeps erroring on one of the sound files saying it's a virus.

 

Anyone else had this problem?

 

Any ideas how to fix it?

 

Thanks!

Same Problem here on my sons rig( see attached autoupdate_log.txt). Microsoft Defender is blocking the update.

00015.082 ERROR: UNPACK_FAIL: (3896)->[FileError: C:\Program Files\Eagle Dynamics\DCS World\_downloads\Sounds.edc/23/23dfd88b13390df2b334ffa114afdd77f7f6cb86ed0848e55dccdfed69619031.downloading.652958c8d81280a6: (225) Der Vorgang konnte nicht erfolgreich abgeschlossen werden, da die Datei einen Virus oder möglicherweise unerwünschte Software enthält.
] C:\Program Files\Eagle Dynamics\DCS World\_downloads\Sounds.edc/23/23dfd88b13390df2b334ffa114afdd77f7f6cb86ed0848e55dccdfed69619031
00016.231 STATUS: C:\Program Files\Eagle Dynamics\DCS World\_downloads\Sounds.edc/23/23dfd88b13390df2b334ffa114afdd77f7f6cb86ed0848e55dccdfed69619031.downloading.652958c8d81280a6: (225) Der Vorgang konnte nicht erfolgreich abgeschlossen werden, da die Datei einen Virus oder möglicherweise unerwünschte Software enthält.

 

Problem doesen't happen on my rig via steam.

 

[Mking]

Same problems

[9 Грамм]

Same Problem, and in Open Beta too, if i will them download

[DD_fruitbat]

Same problem here to

[Furia]

Simply go to your Windows security, check the DCS file placed in quarentine and in "actions"select the option "Restore". Launch the updater again and it should work. It worked for me.

 

This is an screen of the Windows Security Panel. Find the History of Threads and restore the DCS file.

My windows is in Spanish but I think it is pretty self-explanatory

 

Edited December 25, 2020 by Furia

[Rudel_chw]

I’m rather tired that no ones searches for solutions for their issues, it gets tiring to repeat the solution time and time again

[Furia]

3 minutes ago, Rudel_chw said:

I’m rather tired that no ones searches for solutions for their issues, it gets tiring to repeat the solution time and time again

Try the solution I posted above. It worked for me and it is quite simple

[Rudel_chw]

4 minutes ago, Furia said:

Try the solution I posted above. It worked for me and it is quite simple

on post #2 I suggested the same solution, but more generic as not everyone uses the same antivirus.

[c0ff]

This file is encrypted audio data.

Looks like some part of it accidentally matched a virus signature, and generated a false positive.

 

There's no general solution for such problems apart from whitelisting the application. Such amount of random data (and properly encrypted data does look random) will match short virus signatures with a pretty high probability.

[Buzzer1977]

3 hours ago, Rudel_chw said:

on post #2 I suggested the same solution, but more generic as not everyone uses the same antivirus.

Because it's not a solution, only a workaround. Turning of safety features of your PC isn't something people should do if they don't now about the risks.

[Rudel_chw]

27 minutes ago, Moraldino said:

we users should not whitelist this on our own. That's a bad idea, and ignoring the problem while putting our systems and others at risk.

putting the system at risk? ... of course that could happen if you completely disable the AV .. telling it to stop monitoring a folder poses no significan risk.

[Rudel_chw]

Ok, do as you want, and I will do the same and refrain from debating about viruses, instead I will go fly on my updated DCS 

[Lange_666]

On 12/25/2020 at 10:50 PM, Moraldino said:

Viruses in general tend to put systems at risk, and then spread to other systems to then do the same.

Whitelisting a virus is to gamble. You simply don't know if it really is a virus, or if it's a false positive.

 

I've seen that ED staff member c0ff has claimed in another thread that it's a false positive.

That's fine, and good of c0ff to do, but I don't know him/her, though I'm sure he/she is a nice person and good at what he/she does.

So if we're only to trust the words of everyone blindly over the interwebs, then what's the point of antivirus programs at all?

 

With kind regards.

 

Dude, it's a known problem which roars it's ugly head from time to time (if you search the forum, you would find lots about it, telling the same story over and over again).

It happens to other software to, not only DCS (ex: Foxit Reader, a PDF reader had the same problem with his latest installer/updater)

Just white list it and move on.

Edited December 27, 2020 by Lange_666

[Buzzer1977]

Official workaround:
"If your updater got corrupt because of a broken antivirus or firewall software, you may download it here: DCS_updater_64bit.zip 3.9 MB"
https://updates.digitalcombatsimulator.com/

[Lange_666]

But then this AV warning has nothing to do with a corrupt updater. It's a sound file with some virus matching data that kicks off the AV.

There are lots of false positives around, not only in DCS.