Bitdefender Detected this as potential malware, most likely due to the running of a temporary file from APPDATA folder

[tnoyce]

Not certain there is anything which can be done about this, but in this day and age, a lot of ransomware runs from APPDATA. If there is a way to have the temporary file go to a different location, it may help resolve some potentlial frustrations. I was unable to run this game without disabling my anti-virus, which was interpreting this exe:

C:\Users\<user>\Appdata\Local\Temp\rtD2AB\stdrt.exe

As potentially malicious:

"Active Threat Control blocked this process based upon " The applications behavior can harm your computer".

Normally, it would be possible to add an exeption to get around this, however, since the folder changes each time, I have to physically protection off.

[Del_Duio]

Oh Jesus I forgot MMF games can show up as a false positive on some of these! I had the same issue with Just a Cleric and listed the game on a site which then sends the game's info out to a bunch of antivirus websites as OK to allow.

I'll do the same with ETL as soon as possible. I can't do it for at least another couple hours but I'll let you know as soon as it's done.

Thanks for bringing this up!!

EDIT:

Okay so I scanned the game on VirusTotal which is a website that will report what antivirus programs can pick this up as malware:

Baidu
Cyren
F-Prot
Jiangmin
NANO-Antivirus
Yandex

It lists 6 out of 55 as detecting this as a bad file. I will now work on making sure those places know this game is A-OK.

EDIT #2:

It looks like Bitdefender has a size limit on what files I can upload to them (25MB, whaaaat?) and the .exe for ETL is 49MB. I think when I scanned and ran it through VirusTotal it sends reports out to those listed above but Bitdefender's not on there. I'll keep trying.

[tnoyce]

Let me know if there's anything more I can do for you.

I may be able to do something from this end as well.

[Del_Duio]

Originally posted by tnoyce:

Let me know if there's anything more I can do for you.

I may be able to do something from this end as well.

I went on their website to try to open a ticket (which looks like the only other option if your exe is more than 25MB) however in order to do it you have to already own one of their products it looks like. The first selection is a big dropdown box with all the different Bit defender products and it won't let me get to another field without entering the first part. What's worse is they don't seem to have a forum where I could join and ask from there.

I'm hoping that submitting it to TotalVirus will somehow register with BitDefender too in the meantime. I KNOW I was able to do this same thing before with JAC so the hunt goes on for the solution!

Thanks for your understanding, buddy. Trust me I'm no Russian spy!

[tnoyce]

I didn't really think there was any infection or behavior issue, just figured I should let people know so they don't panic if they see this issue, or can't play the game (as I can't, without disabling anti-virus temporarily)

I've submitted a ticket, we'll see if that gets any love from them. Overall, I've actually been pretty pleased with their product over the years, but it does get a bit 'in the way' sometimes.

[Del_Duio]

That's great, thanks a lot!

[tnoyce]

So they replied back, and want the exe files .. (of course.. :P)
At any rate, I'm uploading them right now. I wasn't 100% certain which EXE (the main or the littls stub) was the real issue, so I'm doing both.

I'll let you know if I hear any more from them.

[Del_Duio]

Originally posted by tnoyce:

So they replied back, and want the exe files .. (of course.. :P)
At any rate, I'm uploading them right now. I wasn't 100% certain which EXE (the main or the littls stub) was the real issue, so I'm doing both.

I'll let you know if I hear any more from them.

Honestly these false positives are so stupid. The more I look into it the more games I see that are being targeted as malware by these things.

Thanks for your outstanding efforts with this, tnoyce!

[tnoyce]

Just wanted to update everyone..
I got back an offical "It's OK and will be allowed as of next update"

"..
Thank you for your patience and sorry for the long wait.

The analysis of the files has been completed. They were found clean, and the detection will be fixed in the next update.

Therefore, please do a manual update of the signature database, and then check if the situation is resolved.

Please do not hesitate to contact us should you have any other inquiries in the future.

Have a great day.

Best regards,
Robert Iancu
Technical Support Engineer
.."

I'm applying the update now.. (fingers crossed)..
Seems they are good as their word. Game launches now, without a complaint.

YAY!

[Del_Duio]

I'm honored you went through so much trouble and so happy it finally works for you!!

You've also potentially saved some players down the line from an uneccessary headache.

I now give you...
A 21 cleric salute!!

[Stovastove]

old thread, but came to say: bitdefender is a cancer - coming from a paying customer

[Del_Duio]

I wholeheartedly agree!
I have Avast (ye landlubbers) and though it doesn't flat out reject the files it always pops up to ask me if I want to virus myself to death haha.

Good to have you aboard!