We blocked a threat: Virus.Generic

[Black Heart]

This VN is setting off my antimalware/antivirus apparatus (Vipre Advanced Security). Something that downloads in the first 5MB of the installation is being identified as a virus, and thus the entire download keeps being nuked and starting over from scratch.

Any ideas what it is that is being downloaded, why it's being identified as a virus and if it's safe to whitelist?

Thanks.

[Taebrythn]

sometimes visual novels can give it off because of the program itself. this one should be safe. i know i downloaded it off of their site

[Black Heart]

Hm'kay. I guess I can try to sandbox it, just in case.

[Black Heart]

http://oi68.tinypic.com/yjewl.jpg

Yeah I'm somewhat at a loss. Even after whitelisting this, Vipre is so determined that this is a virus that it won't even let Steam move it from the download folder to the installed folder. What is is it that this particular executable tries to do that an antivirus would keep it quarantined AFTER being removed from quarantine?

[Black Heart]

So I tried running the VN right out of the download folder, and it boots up and runs fine even with this omoikane.exe in quarantine and not accessible. So my question is, what does omoikane.exe do and why is it that the VN won't run without it through Steam if it isn't needed for the VN to boot and run? It continues to look more and more suspicious.

[Taebrythn]

yeah that i can't answer. seems i don't have that file when i downloaded it from their site.

[Stardust Memories]

Your AV is probably set to be too paranoid about threats - we recommend you redownload. This file, present in both the Denpasoft and Sekai Project versions, runs the screenshot/share to twitter capability.

[Black Heart]

I'm on my third download attempt. Now rather than nuking it outright, both Vipre and Windows Defender have locked the file to its download location. It cannot be moved or installed. Steam returns the "Content Locked" error at 100% download progress and cannot install as a result of this problem.

Whether this secondary .exe is a threat or not, I refuse to create a hole in my security to be able to read a visual novel. No VN is worth exposing my system to that risk, so I have no intention of having Vipre stand down or lowering its alert status. Is there a way to extricate Ne no Kami from omoikane.exe so it will run correctly on Steam, or is it doomed to be forever ensnared by my antivirus and probably refunded?

[Stardust Memories]

To be very clear: what you're seeing is a heuristic flag, rather than an actual detection. I'm not entirely sure why Windows Defender is flagging it as well, but it's generally good practice not to run two antivirus solutions at once, as they can cause file locking and other issues.

As this file is required for the game to run under Steam, we are unable to recommend any other action besides reporting the file as a false positive here: https://www.vipreantivirus.com/support/submissions/false-positive.aspx

[Black Heart]

I'd love to turn off Windows Defender, but even though the setting is "Off" Microsoft's "We know better than you." approach to security seems to have forced some features to remain on regardless of what I say, think or do. This seems to be one of them.

EDIT: Yeah, I've stopped all three services related to Windows Defender and Windows, not Vipre absolutely refuses to release the file. Vipre's like "'Kay, it's fine. You whitelisted it." Windows is like "Awh hell naw, you ain't moving that."

[Stardust Memories]

At this point, I'd have to recommend checking Vipre support. =/ Apologies, as I'm too unfamilar with that product to help you.