PDA

View Full Version : Win32/Heri Virus Found!



Iceman
April 18th, 2017, 11:19
The latest update appears to contain the Win32/Heri virus, a pretty scary one from what I am reading. Unfortunately resolving the virus also prevents FG from working! Can we get a clean release please?

Erin Righ
April 18th, 2017, 11:32
What you are getting is a false positive caused by your AVG anti-virus program, you need to make an exception for the installer and executable in avg

Iceman
April 18th, 2017, 11:34
uh....sure. Perhaps I can post my bank account password here as well.....

Erin Righ
April 18th, 2017, 11:36
seriously dude, how else did I know you were using AVG?

Zacchaeus
April 18th, 2017, 11:39
More help here (https://www.fantasygrounds.com/forums/showthread.php?37783-FG-3-3-0-update-AVG-reports-infected-FG-exe) and here (https://www.fantasygrounds.com/forums/showthread.php?37798-Win32-Heri-virus-in-3-3-0-exe)

ddavison
April 18th, 2017, 14:44
To summarize the other links posted, this is a false positive within AVG. You can fix it now by adding an exception. Alternately, you can wait for AVG to correct their false positive. We have sent the executables to AVG so they can update their records.

This has happened with other releases in the past, but not every one of them. Why does AVG occasionally pick up and report Fantasy Grounds as a virus? We suspect it is because the updater and executable replaces itself as part of the update. It could also be the simple process of one executable downloading and placing another executable on your hard disk. That is the same technique that a virus uses to replicate itself.