WARNING: Norton / Avira broke Automobilista

While downloading the latest update for AMS Avira popped up saying that AMS.exe was the TR/Crypt.XPACK.gen trojan. While I'm sure it's a false positive it's probably something for the devs to look into.

 

It has 4 hits on Virustotal

Bkav - W32.HfsAutoB.84F4
Cyren - W32/Troj_Obfusc.N.gen!Eldorado
F-Prot - W32/Troj_Obfusc.N.gen!Eldorado
Rising - PE:Malware.XPACK-LNR/Heur!1.5594 [F]

I hope they are false positive

 

I've had the current version of Automobilista installed since release but Norton decided to quarantine the executable as well as a list of other AMS files today. It does this every once in a while with other software but just the executable and it's only a matter of restoring the files from the Norton history and excluding them from future scans. However, Norton couldn't recover some of them (it kept asking for a folder to recover to but wouldn't accept any selected) so wouldn't recover any files. I did a game cache verify in Steam and this got it going again but it looks like it wiped out my configs in the process. I excluded the whole folder to avoid future grief.

Hope this helps someone out there.

 

I heard a talk some time ago about malware/virus being transmitted over via steam downloads from time to time. How certain are you this is a false positive?

I mean, I also use Norton and I haven't had any issues so far. *EDIT: scratch that, just got red flagged as well.

 

ams.exe always has, and still is giving several positives on virustotal.com,

 

I have a client that has told me, the free version of Avast reports the same thing..once he disabled it for the download/updates..it goes away.
If hey does a manual scan on his system after downloading and install..it never throws the error again as if it was never there after re-enabling Avast.

Dave

 

Ok. But if that's a false positive why won't Reiza white list it with the antivirus manufacturers?

 

McAfee is doing the same thing to me today....

 

+1 on McAfee

 

I think someone at Reiza should make an official comment on this issue. Even if only a brief one.

We're all assuming it's just a case of a false positive but truth is we don't really know for sure, let alone what it is that the executable is doing to be picked up by so many different Antivirus.

Some clarification wouldn't hurt.

 

Sorry for this being my first post, but McAfee regards ams.exe as trojan Artemis! und pushes it into quarantine. Excepting it and the whole automobilista folder from detecting is not succsesful. Some seconds and it's displaced again. Amsbeta works fine.

 

Same here with McAfee LiveSafe since today... Only way to work around it is disabling realtime scanning (which I do NOT like to do) and restore AMS.exe. After that it works until I re-enable realtime scanning, then it gets quarantined again. The exe from AMS Beta seems to be fine, it never gets quarantined.
It would be nice if Reiza could look into this.

 

Norton , the nemesis of many sim racers for many years.

 

Same here Mcafee deleting my AMS executable.

 

It looks like McAfee is no longer quarantining the exe after the 1.1.5 update, at least not on my machine. How about the rest of you McAfee users ?

 

Now I get a runtime error when I want to join the TT of the week. Offline no problem, online on servers as well...but when going to track in TT of the week, get a runtime error.

 

Are you sure your banner isn't to big?

 

Thanks for your reply.
Norton still not fixed, I will try different antivirus at Norton renewal date.

 

Norton is now fixed it seems

Update just downloaded and ams.exe remained at its place without any warning from Norton.
Thanks Renato.