Kaspersky - False Positive? Nukes Launcher - libcurl64.dll libeay64.dll rofuplib64.dll ssleay64.dll - Workaround

[AndyHedges]

Hi,

 

I'm seeing potential False Positive reports from Kaspersky with the latest version of IL2.

 

The first time I updated my existing installation, it went without issues and I was able to play.  The problem appears to be with the second time that you start IL2 from the Launcher in that the screen flashes up briefly and then dissapears and the Launcher then dissapears as well.

 

It appears that Kaspersky is taking umbrage with the actions of the launcher, rolls back those actions and deletes several files in the process - reporting them as adware (Screenshot attached)

 

As I had no way of getting those files back that were removed, I did a fresh download and installation which worked great yesterday, only to have the same thing happen again this morning when I tried to start the game up.

 

I've managed to workaround this for the time being by making a copy of the backup of the .dll files in the bin\game directory and then renaming that copied file to be the correct name (e.g libcurl64.backup was copied and renamed to libcurl64) which may help others.

 

I won't be able to update the game again without a reinstall of the client, but at least I can play for the time being.  If someone else is able to submit a copy of their launcher.exe file from the latest build to Kaspersky Virus Desk that would be splendid.

 

Thanks,

 

Andrew

[Matt]

30 minutes ago, AndyHedges said:

If someone else is able to submit a copy of their launcher.exe file from the latest build to Kaspersky Virus Desk that would be splendid.

Done.

[ZachariasX]

I wonder if the bottom line troubles of keeping your system running after applying snake oil is higher than a years hassle caused by „viruses“ or „attacks on your system“ (or whatever scare you might have prompting the use of snake oil).

[Dagwoodyt]

I have been using Kaspersky on multiple PCs since RoF before there was a BoX. Never had any issues till this update. Really hope this gets fixed. I don't need the launcher to do ANTHING other than update my install. Also, it should not be necessary to download and install any unsigned files in order to repair the launcher. 

[Mungee]

I've just had exactly the same experience - TERRIFYING - Kaspersky deletes IL-2 launcher (and other files?) - did a system restore (Windows 10) and wait for further developments.

Edited July 30, 2019 by Mungee

[AndyHedges]

On 7/28/2019 at 8:55 AM, Matt said:

Done.

Thank you for uploading that - hopefully this gets sorted soon.  I've never had an issue with Kaspersky and False Positives like this before - I've been running it for quite a few years on many different pc's without problem and it's been good as gold.

 

You can 'whitelist' the Launcher.exe file in Kaspersky under Application Control\Manage Applications to stop this happening to you again in the near future, but it's really not something you should have to normally do!

[Dagwoodyt]

The longer the guessing game persists the more troubling.