Discovery Gaming Community
Virus found - Printable Version

+- Discovery Gaming Community (https://discoverygc.com/forums)
+-- Forum: Welcome (https://discoverygc.com/forums/forumdisplay.php?fid=399)
+--- Forum: Help & Support (https://discoverygc.com/forums/forumdisplay.php?fid=26)
+--- Thread: Virus found (/showthread.php?tid=200748)

Pages: 1 2


Virus found - FireFox - 11-25-2023

As from the latest patch the file CapitalClassFixes.dll is marked as virus/trojan in my computer by Eset and Freelancer crashes.
As far as i can tell it says it's an Inject.apisp variant that attach itself to processes.
Anyone else has the same problem ?


RE: Virus found - Fab - 11-25-2023

false positive. while it does attach itself to freelancer.exe to trick the game into thinking capital ships are freighters (so players can fly them), it isn't a virus.


RE: Virus found - Trakais - 11-25-2023

Yep. And if you dont restore it from quarantine- youll get ban after some login tries. They recomend add whole disco folder (with subfolders) for exclusion.
If you hawe eset then you need add \* in end of line. For example: C:\Users\username\AppData\Local\Discovery Freelancer 4.91.0\*


RE: Virus found - Haste - 11-25-2023

These are "machine learning" detections that are just false positives. As Fab stated above, CapitalClassFixes.dll allows us to let players fly ships of types other than FIGHTER and FREIGHTER, which would be the capital ones. The fact that it messes with another process is probably scary to some antivirus software. Not much we can do about it sadly, other than to suggest "whitelisting" it.

We do our best to avoid these false positives by bouncing these .dlls off of a variety of different players with different systems and/or antivirus', but clearly we can't catch every possible false positive before shipping it. Might just be impossible with the !ML detections.


RE: Virus found - Tenshi Kuonji - 11-26-2023

As a tip now that you know is a false positive, and if you have an active VALID licence, you can send the file to ESET so they review and allow the file to exist and act that way ... so in the future this "issue" don't pop-up, when it happened to me (using that time Avast, then Kaspersky then McAfee) i have submitted if a file pick a wrong state on False-Positive and i write to the support, in less than a week, they updated their servers with the new signatures and everything allowing the file to co-exist with such thing ... is really easy to do it ^^ and can fix lot of problems later ...


RE: Virus found - Ruud - 12-03-2023

But I ran into more trouble. I first told F-Secure that it is a false positive, it restored the file and I could play again. But later it removed it again and now I even cannot restore it, thus not being able to play at all! What to do now? TIA!


RE: Virus found - sane - 12-03-2023

(12-03-2023, 10:43 AM)Ruud Wrote: But I ran into more trouble. I first told F-Secure that it is a false positive, it restored the file and I could play again. But later it removed it again and now I even cannot restore it, thus not being able to play at all! What to do now? TIA!

Just reinstall Discovery and either:
1) Tell your AV to pretty please not delete random files on your computer
Or if that doesn't work:
2) Get rid of your AV
Or if that isn't an option:
3) Find a better AV


RE: Virus found - Laz - 12-03-2023

(12-03-2023, 10:43 AM)Ruud Wrote: What to do now? TIA!




RE: Virus found - Ruud - 12-04-2023

(12-03-2023, 01:49 PM)sane Wrote: Just reinstall Discovery and either:
I already thought of this as well but I just hoped that there was another solution. In vain, it seems.


RE: Virus found - Ruud - 12-04-2023

(12-04-2023, 07:36 AM)Ruud Wrote:
(12-03-2023, 01:49 PM)sane Wrote: Just reinstall Discovery and either:
I already thought of this as well but I just hoped that there was another solution. In vain, it seems.
I did so but unfortunately to no vain: When I select a ship it starts up but seconds later the connection is broken. But this file, CapitalClassFixes.dll, is nowhere to be found. Is there a way to force DSlauncher to reload it again?