ColonelChuck Posted January 13, 2017 Posted January 13, 2017 This issue surfaced with version "-23". The mod installs fine except my Norton antivirus program now blocks and removes the"nestedfolderrenametool.exe" file after mod package installation. Game loads, runs fine without it or it seems to anyway. I acknowledge your warning about antivirus software but thought as an FYI you might be interested in case anybody else reports this item. I did run a scan with my Norton antivirus program on the installer package as downloaded prior to running it and Norton did not report any issues listing the installer package as unsafe. I downloaded a file from USA mirror #2 and from eu mirror #2 just as a check and both files came up the same for the blocked file after installation. Go figure. _Aslain_logs.zip python.log Blocked_File_(Aslains_WoT_Modpack_Installer_v.9.17.0.1_24(1).exe).txt Quote
KJG67 Posted January 13, 2017 Posted January 13, 2017 Hey - not sure if heur.advml.b virus is related to a mod, although Norton flagged and blocked it as I was installing v.9.17.0.1_24. Norton shows it was located in c\games\world_of_tanks\nestedfolderrenametool.exe. _Aslain_logs.zip python.log Quote
Moderator Quaksen Posted January 13, 2017 Moderator Posted January 13, 2017 Heuristic scanning ends up producing false-positives, such as that one you and someone else got. As the file name suggests, it's for folder renaming - and I'm sure Aslain can tell more about it 1 Quote
KJG67 Posted January 13, 2017 Posted January 13, 2017 Just went and unchecked all mods on v24 to uninstall and clean out the Aslain cache completely, and Norton flagged and blocked it again if that helps. Just now, Quaksen said: Heuristic scanning ends up producing false-positives, such as that one you and someone else got. As the file name suggests, it's for folder renaming - and I'm sure Aslain can tell more about it Thanks - yes, some Google searching shows that same topic, but no definitive answer. I haven't seen this in all the times using the mods, so thought I would pass this along to make sure there wasn't an issue. Quote
Administrator Aslain Posted January 13, 2017 Administrator Posted January 13, 2017 What Quaksen said. Btw Here is scan from virustotal.com https://www.virustotal.com/en/file/fd6133b26ae9f11b33a54fb75f3da6d656b04fda87a5939266b3ce4f66d71d30/analysis/ Just 1 hit, false-positive, this file is fine. Quote
LionHeart Posted January 14, 2017 Posted January 14, 2017 If you bring up the details of the Norton warning, you have the option to white-list the file (always allow it to run). That's what I did. I also always right-click on the installer and choose "Run as Administrator" to give it enough permissions to change files, etc. Quote
Administrator Aslain Posted January 17, 2017 Administrator Posted January 17, 2017 Hope it's enough for you... AVIRA: NORTON: 1 Quote
ColonelChuck Posted January 18, 2017 Author Posted January 18, 2017 Well done! Good followup on a non-problem apparently. Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.