Page 1 of 1

BA exe Deleted as Virus

Posted: Sun Feb 12, 2012 12:47 am
by Vegetius
Why is the Battle Academy being detected as a Heuristic Virus? Everytime I get the game downloaded the file is immediately deleted by my Anti-virus program. I've gotten BA Blitzkrieg France downloaded no problem. It's the battleacademy-full-multilang-160[1].exe that is being deleted.

What is the solution to this issue? (The answer is not to turn off your anti virus program to install.) I needed to request a new download link. The 24 hour time limit is about to expire. 24 hours seems to be a a ridiculously short period of time for a download link too. The AV report follows:

Full Path: c:\users\craig\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\uidn2isd\battleacademy-full-multilang-160[1].exe
Threat: Suspicious.Mystic
____________________________
____________________________
On computers as of Not Available
Last Used 2/11/2012 at 3:29:12 PM
Startup Item No
Launched No
____________________________
____________________________
Unknown
Number of users in the Norton Community that have used this file: Unknown
____________________________
Unknown
This file release is currently not known.
____________________________
High
This file risk is high.
____________________________
Threat Details
Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.
____________________________

____________________________
File Actions
File: c:\users\craig\appdata\local\microsoft\windows\temporary internet files\low\content.ie5\uidn2isd\battleacademy-full-multilang-160[1].exe
Removed
____________________________
File Thumbprint - SHA:
25e970b9f32411d81133e20089a72f2f72dd405977fc5a524161378a548136fe
____________________________
File Thumbprint - MD5:
6c39f23bd1f988ab3e34699e59e15165
____________________________

Re: BA exe Deleted as Virus

Posted: Sun Feb 12, 2012 3:02 am
by pipfromslitherine
Heuristic threat means that the virus checker is guessing that it's a virus based on things about it, such as its need for admin priviliges etc. There is no virus on the installer. If you cannot tell the antivirus that it is an allowed file, then I am afraid disabling it for installation is the only approach that will work.

Cheers

Pip

Re: BA exe Deleted as Virus

Posted: Mon Feb 13, 2012 1:23 am
by Vegetius
I understand what a heuristic virus is but the issue is that YOUR game client is deleted before YOUR customers can save it to a hard drive. I figured out a way to get around the issue by forcing a recovery of the deleted .exe file. However I just figured you'd like to know that there are major AV companies out there who are blocking your games from downloading. Trust me I'm not trying to be a jerk, as I just also bought Market Garden and Sealion. Just something to consider since I'd be willing to jump out on a limb and assume that the majority of your sales are digital download and alot of folks aren't going to just "trust" a product after their AV says not too. Nothing more than food for thought I guess.

Re: BA exe Deleted as Virus

Posted: Mon Feb 13, 2012 4:34 am
by pipfromslitherine
We do try and chase down these issues, but there are so many different virus checkers out there, and each update alters whether or not the installer might show up as a virus. It would be an impossible task both for them and for us to try and keep everything synced up.

Another way to look at it is that we can hardly work around some other piece of software which deletes our installer despite it being benign :). These things tend to be very much fleeting - we have had reports before that antivirus X has started blocking an installer/EXE - and then it vanishes again in the next update. It's definitely wackamole!

Thanks for letting us know about this instance though, we will try and chase it up as best we can.

Cheers

Pip