Possible infection with Win32:BogEnt (not satire)

[Sabreman]

Was installing the game for the first time in years, and my Avast coughed up a suspected BogEnt infection (ironically considering the source!) in the libcef.dll. After quarantine, I was able to continue downloading for a while, but occasionally the download would stop with a "missing file privileges" error. Clicking retry would continue on. (Avast gave no more warnings or quarantine notes.) Eventually I got to the point where retrying advanced the download no more.

I've sent the file to Avast for analysis, but haven't seen mention of this suspected problem yet. Will update if I get more information.

[Sabreman]

First update: I tested uninstalling and reinstalling, and the "missing file privileges" error failed the install instantly (including several retries). Nothing left in the install folder, searching around for other possible folders on C drive.

[10sir]

Originally posted by Sabreman:

snip

First thing I suggest doing, is completely uninstall Avast in it's entirety. It is essentially bloatware that will bog down your pc with NO extra protection over base windows defender. Windows defender is ALL you need, it is really good.

Start by confirming whether the threat is even legitimate. It could be a false positive, and Avast has an extensive history with false positives particularly with DLL's used by game platforms or older software such as with lotro. Upload the libcef.dll to VirusTotal[www.virustotal.com] to check of anything else flags the file.

Add a temporary folder exception to Avast's exceptions list or disable Avast if for some mental reason you haven't completely uninstalled it by now.

You can easily fix permissions errors by 1) closing steam completely & reopening steam as administrator or manually fix the file permissions.

By now, if nothing above works, just uninstall Avast already. If you really need a second opinion malware scanner, use Malwarebytes[www.malwarebytes.com] free version and only open it & scan when you need to. Don't get the pro version.

libcef.dll is also part of the Chromium Embedded Framework, and loads of applications use it for web rendering. The likelihood of it being malicious if downloaded from Steam is basically zero.

[Sabreman]

Thanks, that'll be very helpful!

[Talyc Verda]

I'd also second what 10sir was say and advise that you get rid of Avast.

Hell, at this point, I'd go as far as saying that any "anti-virus" program you install is just bloatware. Especially so for free ones.

[Spotter]

For over 1,500 hours, I have found that just Disabling Avast for 10 to 30 minutes when downloading certain Games will keep Avast from corrupting/damaging the download.

[Running-Target]

Or just set LOTRO and DDO as no scan on Avast.

[Rhoklaw]

In 20+ years of online gaming. Not once did I ever have any virus protection programs installed. As stated already, most if not all anti virus software is more harmful than useful.

[Darkbolt{AWG}]

ever hear of a false positive? nothing to see here.

[scrapser]

This alert just triggered my installation of Norton 360 while updating ARMA 3 about 15 minutes ago. Norton quarantined the file and the update was aborted automatically.