I was trying to patch star trek online today so I can do the first contact day stuff, when all of a sudden, my anti virus is popping to life saying that one of your files is infected. What's going on?
object is the file "crypticError.exe"
Infected with : Win32:Evo-gen
So again, I ask WTF? And don't tell me it's my anti virus just going wacko. I know better than that.
Fact: most AV programs have lots of false positives
Why? because they use something called heuristics
Heuristics is a very specific kind of guessing. It's a little bit like profiling.
They scan and see a file or web traffic that has a similar name or sends data down a similar port that a program known to cause problems does.
Do heuristics-based antivirus programs catch some viruses before they're widely reported? well, that's the theory. In practice, they hardly ever do. what they ARE rather good at is mistakenly identifying something harmless as a threat.
A good antivirus program updates its definitions very frequently - every couple days or so. That kind of makes the whole heuristic threat detection more trouble than it's worth (especially since it eats up processing cycles).
So, ask yourself, which is more likely?:
1) Cryptic intentionally placed a nefarious program into their installer so they can sow chaos and tick off their customers
2) some top secret gang of super villains slipped the aforementioned program into Cryptic's installer, instead of just putting it into a pointless toolbar like everyone else does, cuz people install TRIBBLE of their own accord if you ask them to
3) some crappy antivirus program uses faulty logic to block something harmless cuz heuristics are kind of a stupid way to handle security since it's prone to making mistakes.
I was thinking it might have been that weaksauce wonky one that microsoft puts out actually.
heh, fun fact: Microsoft Security Essentials is one of the few (quite decent, actually) AV programs that *doesn't* use heuristics. it also has some false positives, but they're more along the lines of "hurr, what's dis? you wanna let it do it's thing? hurr" variety.
in other words, it's more likely to "advise caution" instead of "warn user of threat" where there is no threat.
I was trying to patch star trek online today so I can do the first contact day stuff, when all of a sudden, my anti virus is popping to life saying that one of your files is infected. What's going on?
object is the file "crypticError.exe"
Infected with : Win32:Evo-gen
So again, I ask WTF? And don't tell me it's my anti virus just going wacko. I know better than that.
Dude, lock the file into a "backyard" in your hard drive blocking all access to the rest of your computer, and break down Win32:Evo-Gen.
The Win32:Evo-Gen file is harmless. It's just data that contains graphics alterations, and a couple .txt files. Nothing nefarious about it at all. I've broken it down.
Dude, lock the file into a "backyard" in your hard drive blocking all access to the rest of your computer, and break down Win32:Evo-Gen.
The Win32:Evo-Gen file is harmless. It's just data that contains graphics alterations, and a couple .txt files. Nothing nefarious about it at all. I've broken it down.
Its nice that you gave some sort of explanation. I had a similar thing happen to me when we had that launcher issue. The answer i got from the mod was it must be the tholians . He was too much of a smart TRIBBLE about a serious, at the time ,issue.
Anything having to do with debugging is notorious for giving false positives in heuristic anti-virus programs. Debuggers have to do some of the same things viruses do, like attach themselves to memory that doesn't belong to them, in order to function.
First off, Avast is what I am using. I've been using Avast for 5 years now. This is the first time that anything like this has happened in the 3 years that I've been playing STO. When it does happen, I get a little nervous, and a little ticked off cause when it happens, it makes you think that cryptic has gotten a virus, and that they are distributing it to their user base. Don't say it's impossible, because everything is possible, (with a slight hint of being improbable).
As for Avast being a 'bad piece of software', I whole heatedly disagree with that statement. Avast is one of the best free antivirus out there, and is alot better than Norton and McAfee. And this is not just my opinion, but the opinion of a good number of IT professionals that I've spoken with over the years. Yes, I realize that everybody is entitled to their opinion, and more power to you to have your own opinion. As i mentioned before, when something shows up and has not shown up in 3 years, you start to wonder. I admit that I could have been a little more diplomatic about my op, but as I said, things didn't add up, and I wanted an answer on it soonest bestest.
I'm using Avast and I did not get this flag, but I do have file system and behavior shields on minimal settings. I do not need an anti virus program monitoring every little thing happening on my computer, I just need it to keep anything bad from getting to my computer.
If something is not broken, don't fix it, if it is broken, don't leave it broken.
I just wanted to let cryptic know, so they could let the makers of Avast know they were getting a false positive on standard settings with whatever path cryptic are taking their error reporting tool down now.
Honestly don't need a lesson in how AVs work, who thinks which is the best AV, or advice on just turning your AV off whist online - however well meaning :rolleyes:
Crypticerror.exe is, in fact, spyware. It is sending information about your computer and memory dumps(which can contain extremely sensitive information), to its masters. Avast is therefore behaving correctly. You should never allow this program to phone home.
Comments
object is the file "crypticError.exe"
Infected with : Win32:Evo-gen
So again, I ask WTF? And don't tell me it's my anti virus just going wacko. I know better than that.
"We are smart." - Grebnedlog
Member of Alliance Central Command/boq botlhra'ghom
I don't use Norton.
Why? because they use something called heuristics
Heuristics is a very specific kind of guessing. It's a little bit like profiling.
They scan and see a file or web traffic that has a similar name or sends data down a similar port that a program known to cause problems does.
Do heuristics-based antivirus programs catch some viruses before they're widely reported? well, that's the theory. In practice, they hardly ever do. what they ARE rather good at is mistakenly identifying something harmless as a threat.
A good antivirus program updates its definitions very frequently - every couple days or so. That kind of makes the whole heuristic threat detection more trouble than it's worth (especially since it eats up processing cycles).
So, ask yourself, which is more likely?:
1) Cryptic intentionally placed a nefarious program into their installer so they can sow chaos and tick off their customers
2) some top secret gang of super villains slipped the aforementioned program into Cryptic's installer, instead of just putting it into a pointless toolbar like everyone else does, cuz people install TRIBBLE of their own accord if you ask them to
3) some crappy antivirus program uses faulty logic to block something harmless cuz heuristics are kind of a stupid way to handle security since it's prone to making mistakes.
I was thinking it might have been that weaksauce wonky one that microsoft puts out actually.
Looks like Cryptic used Viral Matrix on you IRL. HA!
heh, fun fact: Microsoft Security Essentials is one of the few (quite decent, actually) AV programs that *doesn't* use heuristics. it also has some false positives, but they're more along the lines of "hurr, what's dis? you wanna let it do it's thing? hurr" variety.
in other words, it's more likely to "advise caution" instead of "warn user of threat" where there is no threat.
Dude, lock the file into a "backyard" in your hard drive blocking all access to the rest of your computer, and break down Win32:Evo-Gen.
The Win32:Evo-Gen file is harmless. It's just data that contains graphics alterations, and a couple .txt files. Nothing nefarious about it at all. I've broken it down.
Its nice that you gave some sort of explanation. I had a similar thing happen to me when we had that launcher issue. The answer i got from the mod was it must be the tholians . He was too much of a smart TRIBBLE about a serious, at the time ,issue.
Seriously though, I just patched Holodeck and Tribble and had no problems.
It was just a false positive, it happens sometimes.
As for Avast being a 'bad piece of software', I whole heatedly disagree with that statement. Avast is one of the best free antivirus out there, and is alot better than Norton and McAfee. And this is not just my opinion, but the opinion of a good number of IT professionals that I've spoken with over the years. Yes, I realize that everybody is entitled to their opinion, and more power to you to have your own opinion. As i mentioned before, when something shows up and has not shown up in 3 years, you start to wonder. I admit that I could have been a little more diplomatic about my op, but as I said, things didn't add up, and I wanted an answer on it soonest bestest.
Honestly don't need a lesson in how AVs work, who thinks which is the best AV, or advice on just turning your AV off whist online - however well meaning :rolleyes: