Soldat.exe recognised as a Trojan - AVG FIXED

[DePhille]

Hi,

First of all:
There's no need to panic, Soldat.exe does NOT contain a virus. It is a mistake in the virus definitions of the NOD32 scanner.

Update:
AVG removed the specific entry from it's virus definitions. Soldat;exe should no longer be recognised as a trojan by AVG and you can safely turn on the Resident Shields again.




Symptoms:
- Soldat.exe is recognised as a trojan.
- Access denied to Soldat.exe .



Explanation:
Most anti-virus programmes use patterns to determine if a programme is a virus or not (called Virus Definitions). Soldat.exe is recognised as a trojan because it corresponds to a certain pattern in those Virus definitions. However, this does not necessarily mean that it does contain malicious code. And, as we all know, Soldat is an innocent game without malicious code.




Fixes:
A. Turn off your virus scanner. Please do not forget to turn it on again when you're done playing Soldat.
Also, if the virus scanner asks to heal Soldat or ignore it, please press ignore. By far the most virus scanners interpret 'Healing' as deleting the file. Healing Soldat.exe will thus result in having to reinstall Soldat or atleast placing a new Soldat.exe file in the Soldat folder.

B. Michal Marcinkowski or an Admin should send an(other) e-mail to NOD32 and ask if they will remove the specific entry.


NOD32 fix:
1. Click the NOD32 icon in the taskbar
2. Enter AMON
3. Click Setup
4. Go to 'Exclusives' and click on 'Add' and add your Soldat folder (usually c:\Soldat)
5. Download Soldat and install it to the folder you just added.


What virus scanners?
Currently only these virus scanners are reported to detect Soldat.exe as a trojan or virus:
- NOD32 (Recognised as NewHeur_ PE)

Grtz, DePhille

[jrgp]

Yep, I just updated my AVG to see what would happen, and sure enough I got this:

http://soldat.jrgp.org/stuff/soldat_avg.png

Is there a way to tell AVG to ignore Soldat.exe ?

[DePhille]

I disabled my AVG updates so Soldat;exe isn't recognised yet.
However, try playing with some AVG settings and let us know if and how you fixed it, I'll add it to the main post then.

Grtz, DePhille

[chrisgbk]

Spam by Carly deleted.

[ds dude]

Hopefully Symantec Anti-Virus won't get this. I'll see what I can do with AVG aswell.

[PQ]

ok I got a solution without uninstalling:

1. click at the avg icon
2. click at resident shield
3. turn it off
4. start soldat
5. turn the resident shield on again

Edit: AVG, keeps giving pop-ups, so I just leave it off.. till someone has a better solution

[DePhille]

Alright, can someone try this:
- Double-click on the AVG icon.
- Double-click on 'Resident Shield' in the list.
- Deselect 'Use Heuristic Analysis'.
- Click on 'Apply' or 'Ok'.
- Try opening Soldat again.

Grtz, DePhille

[PQ]

Alright, can someone try this:
- Double-click on the AVG icon.
- Double-click on 'Resident Shield' in the list.
- Deselect 'Use Heuristic Analysis'.
- Click on 'Apply' or 'Ok'.
- Try opening Soldat again.

Grtz, DePhille

Doesnt work

[DePhille]

Hmm, I'll update AVG when I get back within a few hours and play a little bit with the settings myself.

Grtz, DePhille

[#113]

it wont let me play now =( even when i click ignore, i get another message

[PQ]

it wont let me play now =( even when i click ignore, i get another message

ok I got a solution without uninstalling:

1. click at the avg icon
2. click at resident shield
3. turn it off
4. start soldat
5. turn the resident shield on again

Edit: AVG, keeps giving pop-ups, so I just leave it off.. till someone has a better solution

[#113]

k, it works, still gonna be such a pain in the ass though

[REPredator]

I have AVG and it has recognized it as a Virus.. I uninstalled it for the time being. AVG not Soldat   

[Lord Shadz]

I have AVG and it has recognized it as a Virus.. I uninstalled it for the time being. AVG not Soldat

lol legend atm im just got no virus protector...pffffft who needs when not looking @ porn

[TbbW]

to turn off resident shield worked for me...
always a bitch when AV's go haywire on files u know are okey.

u guys think we suld do a comunity event and all email AVG to see what ther reaction is?

[puddlejumper]

I didn't pay for AVG's 'services', therefore I don't 'benefit' from Resident.

Though you shouldn't be using Resident anyway. There are plenty of good quality software you should run but once a week. Though for those of you who do run AVG's RAM taxing-goodness Resident, I hope that you get this fixed. I'll participate in any community action against this. Seems like fun...

[Major Lee Stupid]

Dang.  Work machine... I guess I have to go the otherway and trust AVG until Soldat is de-listed.   Commercial stuff on my machine so can't take the risk.   Bah.  I knew there would be a downside to being "out of my teens" and playing this game sooner or later.   Just when I was thinking of joining -=OLDIES=- too!

[DePhille]

Alright, I downloaded the update for AVG too and I tried playing with the AVG settings.
However, AVG is pretty stubborn (which is good for a virus scanner) so I think shutting down the Resident Shield while playing is the only option.

I'll contact FliesLikeABrick to ask if he'll send a mail. I can send one too ofcourse, but I'd rather let an administrator or Michal do it.

Grtz, DePhille

[mikembm]

Just use Avast. I switched from AVG to Avast a while ago and I am happy I did (esp. now). Avast is free also.

[JaKe]

AVG is a good antivirus, fast and light. But, like ALL antivirus, he can do something wrong, due to detection rules. I hope that Grisoft will release as soon as possible an hotfix to solve this problem...

[Boots]

Lol I unistalled soldat b4 I read this, And now I can't play Tw??

[Toxic]

For AVG just restore it from the virus vault and hit "ignore" next time it pops up. >_<
And TW has nothing to do with it.

[Raithah]

You guys should really just ditch that third-rate antiviral program and go Avast! . It's faster, cooler and all around better.

But for your problem, I'd suggest looking for a 'Game Mode' similar to what Zone Alarm has for it's firewall : it disables some of it's protection that references games.

[ultraman]

I switched off AVG before running Soldat, I still get this message which prevents me from running it. AVG is completey off, not just the redident shield.

[IChangedMyName :)]

Yeah me too. Just updated the virus def. now. >_< . I re-installed Soldat. Still gives me the Access Denied message even thought AVG is off.
Hmm, downloaded the brand new 1.4 and still gives me some crap.   Oh well, back to studying.

Pfft Soldat is so unhealthy 

[General Meevious]

argh! this is dreadful.. I hope MM gets this sorted soon.

Yes, ultraman, I'm getting that too. I turned off AVG, re downloaded and installed soldat and still got that message. can't play soldat until it's fixed..

[RyRy]

AVG released a Prioty update today, but Still finding Soldat to be a virus. Cant anyone contact them and say "Look, there  is a Multimassive online game that is being thought as a virus. TAKE IT OFF YOUR ****ING VIRUS DATABASE LIST!!!!!"

That should slove the problem ^.^

[General Meevious]

indeed.. i wonder how the hell they could make such a stupid mistake anyway? I mean obviously the bit of code they told it to look out for is not necessarily a virus, so why weren't they more specific? anyway, I emailed them yesterday to ask what could be done about it, with a link to a soldat download mirror.. but no reply.

[RyRy]

You forget most companys like AVG are fully up themselfs and will properly;

A) Not email you back
B) Say "There is nothing wrong with our program! It is a virus no matter what you say!"

or

Ello thiz iz tech support in india!

No offensive to the Indians, you guys rock, just the tech support needs a tiny bit of work on

[General Meevious]

hah, yeah, i don't know if this will ever get fixed.. but it sure puts me in a difficult situation. Soldat is my most played game and I don't want to use an inferior antivirus program..

[PQ]

I replied a solution twice already, just read the all the post...

ok I got a solution without uninstalling:

1. click at the avg icon
2. click at resident shield
3. turn it off
4. start soldat
5. turn the resident shield on again

Edit: AVG, keeps giving pop-ups, so I just leave it off.. till someone has a better solution

you can also ignore the pop ups you get after starting soldat.

this is not a permanent solution, just wait till it gets fixed (which may never happen) or get another virus scanner

[DePhille]

Your solution doesn't always work, PQ. Turning off resident shield worked for me yesterday, but not today.
Maybe the release of 1.4.1 will magically resolve this problem, but we should have an email sent to AVG.

Grtz, DePhille

[EnEsCe]

I sent AVG an email, because I have a valid license with them I should get a reply pretty quick. Usually they just say "Sorry but your software has a virus, we are right and you are wrong."

[JaKe]

Maybe some code change in soldat.exe & recompile will solve the problem...

[DePhille]

Thanks EnEsCe.
Please let us know what the reply was when you get it.

PS: I don't have too much faith in this. I also think they will just claim that Soldat.exe does contain a virus. After all, they're offering a free scanner, so they don't have any obligations to the free users. It's a shame for those who paid for it if this happens to be true.

Grtz, DePhille

[IChangedMyName :)]

Quote --> "Your solution doesn't always work, PQ. Turning off resident shield worked for me yesterday, but not today.
Maybe the release of 1.4.1 will magically resolve this problem, but we should have an email sent to AVG.

Grtz, DePhille "


Hmm, make sure you don't run Soldat before you turned the shield off. If you have the "white window" instead of a Soldat icon, you should restart your PC I suppose.

[{depth}shaman]

i'm having trouble to. OH well. There's always newgrounds.com and halo down my dormhall. Someone PM when this gets fixed maybe?

[Finvagarty]

I have this kinda problem too. It occured yesterday I think, when avg said it's a trojan. So I accidentally healed it -> delete. So when somehow Windows didn't let me paste a new soldat.exe to that directory, I installed soldat all over again to the same directory (and after this I also tried to install it to different directory) on the top of the old Soldat. In some point the icon went white. I switched off avg, so I got rid of its warnings, but there still is this Window's warning, that says: "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item."

http://img264.imageshack.us/my.php?image=soldatprobuj4.png

[~viper~]

at first I was getting problems, but now, on clean 1.4 install, disabling the resident shield avoids the whole 'access denied' problem.

always click ignore, and never heal, for AV progs simply delete the file

[thegrandmaster]

Reminder to all soldat players with Soldat
1. Turn off network connections (internet)
2. Turn off residential shield
3. Load Soldat
4. Turn on residential shield
5. Turn on Network Connections (internet)

That is the safest way, because whilst you are playing, you have no protection from viruses.
But you can turn everything back on again when you've loaded soldat.

[General Meevious]

I received a reply! (quick, huh?)

Unfortunately, it basically just questioned my authenticity. Because I'm still running free edition, I wasn't on their database, so apparently my complaint wasn't worth looking into. >_<

I replied again anyway though!

[DePhille]

Uhm, if your soldat icon turned to a white window-thingy you already ruined it. Rebooting your PC doesn't ehlp. You must delete Soldat completely (also the windows registry entries) and then reinstall it. Just do not click on heal or anything and make sure you turn off AVG Resident Shield before you open Soldat.

Grtz, DePhille

[Toumaz]

Reminder to all soldat players with Soldat
1. Turn off network connections (internet)
2. Turn off residential shield
3. Load Soldat
4. Turn on residential shield
5. Turn on Network Connections (internet)
That is the safest way, because whilst you are playing, you have no protection from viruses.
But you can turn everything back on again when you've loaded soldat.

What if you want to play against something else than stupid bots? ;o
As long as you don't actually download shady material or visit suspicious sites (hint hint, IE) you'll be fine. Side that with a decent firewall and you can temporary disable it without any real risks.

[General Meevious]

aw.. turned out that the reply i got was a bot message, got another one just like it. :/

[light487]

Uhm, if your soldat icon turned to a white window-thingy you already ruined it. Rebooting your PC doesn't ehlp. You must delete Soldat completely (also the windows registry entries) and then reinstall it. Just do not click on heal or anything and make sure you turn off AVG Resident Shield before you open Soldat.

Grtz, DePhille

I have done this: Uninstalled Soldat through control panel, deleted the installation folder (as it had maps and things I had downloaded from servers), searched the registry for all references to Soldat and deleted them, then rebooted my computer and installed Soldat.exe and I still can't run the game. I get that same "Windows cannot access the device, path, or file. You may not have the appropriate permissions to access the item."

I am running Windows Vista Premium, I have even tried running the game as Administrator (not that I had to before).. and even tried running from command pompt directly... still I get an "Access Denied" message. All the other parts of soldat install work correctly, ie. the config, mod starter, uninstaller etc.. just that the main soldat.exe file will no longer run on this machine.

May be there is a registry entry that I have overlooked because I just searched for "soldat" in regedit. I have been playing the game, with AVG running daily sweeps for over a week and it was only yesterday that it decided to say it was a trojan..

What now...?

[EnEsCe]

Dear Sir/Madam,

Thank you for your email.

File you have send us for analysis, is false alarm and will be removed from our definitions with new AVG virus base update.

Thank you for your cooperation.

     Best regards,

     Rostislav Ratkovsky
     AVG Technical Support

Mission successful.

[IChangedMyName :)]

I received the AVG update, turned on the resident shield and no prob 

[PoX]

Hrm well there is a few things to address here. First off, to the people trying to contact AVG tech support or anything like that, you can't. Not unless you have the good commercial use, non free version. If you know someone with a good version have them send out a letter to tech support or something, though I don't see it being any real help. Secondly if AVG is your only virus protection, don't be dumb and uninstall it just so you can play games, in this case, soldat.  My actually shield I have on all the time is Mcafee and use AVG as a back up scanner. Well until I updated it a little bit ago I had no issue. Now I'm in the same lot with the access violation. I still have 1.3 on here and it still works fine but not for 1.4. Now whats odd is I NEVER have AVG's shield on, if turning it off works for you, well great, but if anyone finds a good fix plz post it. Other than whats posted already, and what I'm going to try and do is to turn off ANY components avg through task manager and turn off some of its extra features. The only thing that I know that works for sure is flat out uninstalling it, as I tried it earlier. However avg works great and actually got me out of a tight fix once my other scanners didn't even catch a hint of so I'm not to keen on letting it go.

Date Posted: May 16, 2007, 11:50:19 pmWow well actually just after I posted my last post I got it to work. I updated and turned of that scanning component of the shield and the e-mail scanner and no problem. Good luck to the rest, I'll see if I can't find something for everyone else should someone else not find it first.

[EnEsCe]

PoX.... Read my post... Thats from AVG...

[PoX]

PoX.... Read my post... Thats from AVG...

Pssshh Well never mind me LOL. Just trying to be helpful... but apparently did read everything in here first. LOL sorry

[Bitem]

hahah tkx enesce

[General Meevious]

Thanks a lot EnEsCe, you rule.

[NorrisScott]

Go figure it's EnEsCe who saves the day. Much love, man, thanks for fixing our Soldat

[trentblase]

Hey, I trust that there's no virus in the official release.  But as far as I know, you can't download the game from the official website, only mirrors.  Therefore, anyone running a mirror could easily slip in a real virus and all of us would be ignoring it.  It would therefore be cool for the authors to post the md5 hash of the authentic zip file so we can verify the integrity of what we get.

[canadianassassin]

guys just diable the resident shield

Date Posted: May 17, 2007, 03:18:41 amo sweet u rule EnEsCe yahhhhhhhhhhhhhhhh

[light487]

ok soldat has suddenly started to work now.. I didn't change anything since my last post and it decided to run again, so I have no idea how the problem was resolved... may be Vista just took its sweet time releasing the file to be used again.

[EnEsCe]

ok soldat has suddenly started to work now.. I didn't change anything since my last post and it decided to run again, so I have no idea how the problem was resolved... may be Vista just took its sweet time releasing the file to be used again.

Wow, this proves no one reads previous posts anymore....

[DePhille]

Alright, thanks alot EnEsCe.
I also updated the main post and the title. Administrators or moderators should decide wether they want to keep this topic for NOD32 or just lock it.

EDIT: Done updating the main post. I didn't notice the typo in the title (recongnised), but that's fixed now .

Grtz, DePhille

[Bugs Revenge]

B. Michal Marcinkowski or an Admin should send an(other) e-mail to NOD32 and ask if they will remove the specific entry.

I've send Nod32's company A.K.A Eset too many emails about this and sent them the file for realizing from the beta versions already,
they seems to ignore emails or something, or it takes them few monthes until they read mails I don't know,
Gotta don't trust them that much anymore.
so now when they fixed this bug at AVG,
about Nod32 you can do it this way :

1. click the nod32 icon at taskbar,
- Enter AMON,
- there click Setup,
- now "exlusives" up there in the tabs --> "add"
Now add some folder at your driver
for ex. C:\Games\Soldat
Now download version 1.4 to that folder,
install soldat 1.4 to : c:\games\soldat\1.4
and perfecto, shouldn't have any problem with nod32 this way anymore.

[DePhille]

Thanks alot, I rewrote it a bit and added it to the main post.

Grtz, DePhille

[EnEsCe]

I guess ill try contacting Nod32 aswell... I have a special format which is very convincing

[Bugs Revenge]

I guess ill try contacting Nod32 aswell... I have a special format which is very convincing

cool, thanks 

[light487]

yeh.. hehe.. see.. even after I disabled AVG, windows wouldn't let me run soldat. I reinstalled it, followed ALL the steps outlined above, and it still wouldn't run. Kept getting the "Access Denied" message, over and over. Then I went to work, came home and suddenly it was working again.

[JaKe]

Yay! Avg problem fixed! LOL

[EnEsCe]

Ok well, Nod32 no longer detects Soldat.exe as a virus.

[DePhille]

Alright then, seems like everything is solved.
I'll let the mods decide wether or not to lock this topic.

Grtz, DePhille

[david montes]

cant play because just b4 the area comes out it says something about an error and soldat.exe at 0000000

[chrisgbk]

Since, as far as we all know, this detection has been fixed, I'm un-stickying this topic and locking it.