Kaspersky refuses latest MSFS v1.15.. (13.Apr.2021)

[TargetLost]

Kaspersky sees the latest update as a trojaner and deletes the flightsimulator.exe.
I can't even add it to an exception because it is not physical there.

What happens is you start the flightsimulator App and after the Asobo etc screen the picture of the City with that arc int the traffic roundeabout (is it berlin or paris or somewhere else?
appears it crashes and kaspersky reports a trojaner.

It seems thats the timepoint it does the xbos live account access.

Any advice what to do?
Is disableing Kasperky entierly the only way? Gives me a bad feeling what the heck is this update doing with my windows system!?!?!?

[ChristianityToday (Josh)]

I would disable kaspersky, seems like a false positive

[TargetLost]

Seems I have no choice.

What ever this update does I can not continue windows operation after the App crash/kaspersky block. Can't even open the PC anymore. And on first reboot I had to hold the on button for 4 sec to get the PC out of black screen on booting.

Thanks for all the troubles Asobo. I really hate updates because on every update I have to win another 2 day fight to get this thing with my favorit A320 flybywire plane running ok again.

I WANT TO OPT OUT OF UPDATES!

[ChristianityToday (Josh)]

Originally posted by TargetLost:

Seems I have no choice.

What ever this update does I can not continue windows operation after the App crash/kaspersky block. Can't even open the PC anymore. And on first reboot I had to hold the on button for 4 sec to get the PC out of black screen on booting.

Thanks for all the troubles Asobo. I really hate updates because on every update I have to win another 2 day fight to get this thing with my favorit A320 flybywire plane running ok again.

I WANT TO OPT OUT OF UPDATES!

Maybe you can keep Kaspersky enabled but whitelist msfs,?

[TargetLost]

Originally posted by Rule Britannia:

Maybe you can keep Kaspersky enabled but whitelist msfs,?

That's what I tried but //?//root/.... something is not a physical path. I can add it to the exception and I did but it gets ignored.

Well I can stop kaspersky completly for a time with its icon and thats what I did now.
However now I am in a press any key loop of dead.

He says he cannot connect to the content server then presents me the XBOX live log in to automatical login. On pressing the play button there it repeats with any key screen cannot connect etc..

To all I know I am logged in in Xbox live..or at least in MS play store..don't know how I can explicit force that xbox live login dialog.

Now I do not know if their servers are simple overrun or kasperky damaged flightsimulator so it can't update anymore ever.

If I were not such a flightsimulator enthusiast I think that's the point where I would delete this program for good.

[Sandhill]

I'd delete Kaspersky, it is malware, along with Norton and other such unnecessarily intrusive junk.

[TargetLost]

Originally posted by Sandhill:

I'd delete Kaspersky, it is malware, along with Norton and other such unnecessarily intrusive junk.

You have no idea how much valid threads it has found in the years since I have it. I am not talking about fake and false alarms a lot shady antivirus programs show but real trojans and maleware.

If you just run a gameing PC and play some games on it and do nothing critical or with value you won't need it of course.

Anyway my MSFS is destroyed. I hope it's just an overload on their server side and it magical will work tomorrow again... if not then I really do not know how I can repair this. Demotivates me massively to be honest.

[Dk_Evers]

Having the same problem, but using Avast. I have tried to disable it, no luck. Now im reinstalling after "verify game file integrity" in steam. DON'T DO THAT... unless you like to download 170ish gb again. But I hope that it will solve my issue.

[Sandhill]

Originally posted by TargetLost:

Originally posted by Sandhill:

I'd delete Kaspersky, it is malware, along with Norton and other such unnecessarily intrusive junk.

You have no idea how much valid threads it has found in the years since I have it. I am not talking about fake and false alarms a lot shady antivirus programs show but real trojans and maleware.

If you just run a gameing PC and play some games on it and do nothing critical or with value you won't need it of course.

Could not disagree more. In all the decades I've used PC's for things "critical or with value" I have always found such AV programs to be at best a rip off. Microsoft Defender and freeware like SuperAntiSpyware currently serve me quite well, thanks and never nonsense like MSFS tagged as a trojan.

[TargetLost]

You may have your opinion Sandhill. I see that very different and with this lets drop the AntiVirus discussion here. There are always two sides and it leads to nothing.

Back to topic.
Lucky I could pass the Xbox Live Login deadlock.
In that loop I choose my second account for once which does not have the Sim. This opened the Xbox console something whatever that is (much too many xbox apps a real mess)
and also let MSFS pressenting me the choose a configuration screen. (I had this the last time I lost my config when I pressed yes on the "Package outdated" dialog)

Instead choosing something I closed MSFS.
With the Xbox console app something I logged off my second account and logged on into my MSFS xbox live account.
Still keeping that thing open restarted MSFS and this now finally pressented me the
22 GByte download.

I think that XBOX Live account thingy is the biggest microsoft mess I have seen. I do not see through it and it always causes trouble.

[toolpusher33]

Must agree with Sandhill over the years I have tried them all Kaspersky russian spyware at best . Had it for a month was very intrusive did not trust it. i use MS Defender and the free version of malware bytes . Works for me

[Sandhill]

Originally posted by TargetLost:

You may have your opinion Sandhill. I see that very different and with this lets drop the AntiVirus discussion here. There are always two sides and it leads to nothing.

Glad that you found and have shared a solution ,it will probaqbly help others confronted with the same problem. My only point is that Asobo/MS bear little if any blame for the situation.

[TargetLost]

Sure that Kaspersky see that update as a trojaner which it is likley/hopefully not is not Asobos/MS fault. Had been nice thought if they had testet it on a system with antivirus before.

However the points that I blame on Asobo/MS:
- why does the update creating a flightsimulator.exe in nivrvana/memory/app space or wherever where it can not be added as an working exception and can not be found since it is not a valid physical path,
- The XBox Live login deadlock.
- The "package out of date" = config lose (from before the update..it can have caused the xbox live login problem in connection with this update remember I saw the very same config screen when that package out of date happened)

I just hope the A320 flybywire is not broken for once... one can hope/dream...

[X Driver]

Just configure Kaspersky with MSFS as a safe program and it is OK. I always configure Kaspersky to shut down when any simulator is running in my system.

[TargetLost]

Originally posted by X Driver:

Just configure Kaspersky with MSFS as a safe program and it is OK.

How? If someone can tell me I would be glad because Kaspersky still sees the Flightsimulator.exe as hostile after the 22GByte update. I use the MSFS Store version.

I configured both FlightSimulator.exe in the Applictaion folder (in the main and in the sub) as trustworthy and allowing childprocess but that is not the exe that is causing the problem.

It somehow creates a child
\\?\GLOBALROOT\Device\HarddiskVolume13\FlightSimulator.exe
process that causes the trouble.

I can add this to the exclusion in Kaspersky but funny enough then the Flightsim does not crash anymore but Kaspersky still says it blocked the start of that .exe and the FlightSimulator seems not disturbed by this. Maybe it's a watchdog process?

It's the first time I see this path:
\\?\GLOBALROOT\Device\HarddiskVolumeXX

and I don't understand what or where this location should be. I asume it's in memory only or something.. can anyone enlighten me here? I really would like to know this.

I hate that Microsoft tries to hides paths (Apps) and or made them cryptic non existant can you be any more hostile to the users?

Anyway what I observed is that the XX at the end changes likely with each FlightSimulator update. Before the 22 GByte update it was 15 and now it is 13.
And in the History of Kaspersky I see 4 or 5 other numbers.

[Summer]

Open Kaspersky. Click the gear icon (settings) in the bottom left corner of the Kaspersky launcher. Go to "Threats & Exclusions," then "Manage Exclusions," and click "Add." Broswe to the path for "flightsimulator.exe." I left the "Object" and "File Hash Code" boxes empty. Selected "All components." Set the status set to "Active." Click "OK." Hopefully that will work for you!