AVAST REMOVES arma3.exe !!!

[My longest ree ever]

This has never happend before for me on any steam game
I can't update arma from steam, avast keeps removing arma3.exe it saying it is a virus.
Now obviously i can disable avast, but i would rather keep the protection on, since i have had virus issues before

[My longest ree ever]

edit: it is from the /downloading folder in steam

[NZPorterDJ]

Avast is known to be too aggressive WRT removing things that are not a threat. If you want to install ArmA III before Avast catch up again and fix their ♥♥♥♥ you'll need to temporarily disable Avast and set up an exception for the ArmA3.exe.

Otherwise you'll need to wait for the official fix. This is NOT an issue caused by Bohemia so they have no input into it's resolution.

[Astro]

I have the same issue, i updated my arma and it said arma.exe is a virus... weird

[Astro]

It still updated it though.

[NZPorterDJ]

You can tell Avast to allow this update through, and there is absolutely NO threat from updating ArmA III through the Steam client. Well, no threat of virus or trogans anyway. Bugs will still get through, though ;-)

[Astro]

I got the threat from Avast but it still aloud it to update :), i wonder why avast said it was a threat though

[NZPorterDJ]

Originally posted by Astro:

I got the threat from Avast but it still aloud it to update :), i wonder why avast said it was a threat though

Avast checks a checksum against it's database of known bad executables, but this is only a fingerprint and there are a large number (but not infinite) number of possible fingerprints available. It therefore can get caught on an executable that looks like a known virus but the fingerprint is generated by different code.

Avast just checked the ArmA III fingerprint against it's database and found a threat identified with this and triggered a warning. You then have to apply your own experience and decide whether you trust Avast or the BI devs more... Avast has triggered false positives before; BI (ArmA) devs have never distributed a virus... and make a decision on whether to allow the process through or wait.

[My longest ree ever]

Originally posted by WiLD|NZPorterDJ:

Originally posted by Astro:

I got the threat from Avast but it still aloud it to update :), i wonder why avast said it was a threat though

Avast checks ... or wait.

yeah i forgot i could just make an exception. The issue for me was that avast removed the arma.exe from the download folder, steam would download a new one, that new one would be removed (and so on).
It worked when i added the location as exception, thanks

[BeansAndRice]

Ahhh, good to know that this is false positive. Avast is great in some aspects, but messy and crude in others.

[heartc]

The point is, $hit like that is unacceptable to happen to retail software. The rule should be to trust your AV / defensive suit NO MATTER where the software came from, because that is the whole point. If you have to make a "good guess" on your part if it is safe to override the threat warning of your suite, then the whole thing is POINTLESS. It is exactly the function of an Antivir to warn you of suspicious software, and it should not just be hand-waved away by going to a forum and hear what other laymen have to say about it. This is not what security is about.

Who, for example, gives you the assurance that the new build was not hacked either on BI servers, or somewhere along the way between BI and Steam, or Steam itself? Are we supposed to believe these actors are invulnerable? Because they are not.

The proper way to avoid situations like that is for the developers to run their builds against the common AV suits and see if it checks out. If there is a false positive, then it MUST BE PART of the beta test process to clear the false positive in correspondence with the AV developer. Only then should it be released into the wild. Anything else is carelessness and can easily end up one day in a huge major fu*k up, exactly when malevolent actors recognize that carelessness for the attack vector that it is and fu*k your whole $hit up.

[Astro]

I hope Avast doesn't trigger a false positive again, it should be that when it says its a threat, its a threat, there shouldnt be any false ones. Kinda ruins the point of an anti virus protecting you. Avast is great though, it instantly warns you about a threat thats coming your way, and instantly blocks it before it can infect your computer.

[My longest ree ever]

Originally posted by heartc:

The point is, $hit like that is unacceptable to happen... $hit up.

Yeah i agree fully, especially a game of this degree, with the update released through steam,,, for all we know there could be mining code included without us ever knowing

Originally posted by Astro:

I hope Avast doesn't trigger a false positive again, it should be that when it says its a threat, its a threat, there shouldnt be any false ones. Kinda ruins the point of an anti virus protecting you. Avast is great though, it instantly warns you about a threat thats coming your way, and instantly blocks it before it can infect your computer.

it is extremely unlikely, but what if someone had added harmful code into the .exe and the warning was legit?