ColonelChuck Posted January 13, 2017 Share Posted January 13, 2017 This issue surfaced with version "-23". The mod installs fine except my Norton antivirus program now blocks and removes the"nestedfolderrenametool.exe" file after mod package installation. Game loads, runs fine without it or it seems to anyway. I acknowledge your warning about antivirus software but thought as an FYI you might be interested in case anybody else reports this item. I did run a scan with my Norton antivirus program on the installer package as downloaded prior to running it and Norton did not report any issues listing the installer package as unsafe. I downloaded a file from USA mirror #2 and from eu mirror #2 just as a check and both files came up the same for the blocked file after installation. Go figure. _Aslain_logs.zip python.log Blocked_File_(Aslains_WoT_Modpack_Installer_v.9.17.0.1_24(1).exe).txt Quote Link to comment
KJG67 Posted January 13, 2017 Share Posted January 13, 2017 Hey - not sure if heur.advml.b virus is related to a mod, although Norton flagged and blocked it as I was installing v.9.17.0.1_24. Norton shows it was located in c\games\world_of_tanks\nestedfolderrenametool.exe. _Aslain_logs.zip python.log Quote Link to comment
Moderator Quaksen Posted January 13, 2017 Moderator Share Posted January 13, 2017 Heuristic scanning ends up producing false-positives, such as that one you and someone else got. As the file name suggests, it's for folder renaming - and I'm sure Aslain can tell more about it 1 Quote Link to comment
KJG67 Posted January 13, 2017 Share Posted January 13, 2017 Just went and unchecked all mods on v24 to uninstall and clean out the Aslain cache completely, and Norton flagged and blocked it again if that helps. Just now, Quaksen said: Heuristic scanning ends up producing false-positives, such as that one you and someone else got. As the file name suggests, it's for folder renaming - and I'm sure Aslain can tell more about it Thanks - yes, some Google searching shows that same topic, but no definitive answer. I haven't seen this in all the times using the mods, so thought I would pass this along to make sure there wasn't an issue. Quote Link to comment
Administrator Aslain Posted January 13, 2017 Administrator Share Posted January 13, 2017 What Quaksen said. Btw Here is scan from virustotal.com https://www.virustotal.com/en/file/fd6133b26ae9f11b33a54fb75f3da6d656b04fda87a5939266b3ce4f66d71d30/analysis/ Just 1 hit, false-positive, this file is fine. Quote Link to comment
LionHeart Posted January 14, 2017 Share Posted January 14, 2017 If you bring up the details of the Norton warning, you have the option to white-list the file (always allow it to run). That's what I did. I also always right-click on the installer and choose "Run as Administrator" to give it enough permissions to change files, etc. Quote Link to comment
Administrator Aslain Posted January 17, 2017 Administrator Share Posted January 17, 2017 Hope it's enough for you... AVIRA: NORTON: 1 Quote Link to comment
LionHeart Posted January 17, 2017 Share Posted January 17, 2017 Thanks, Aslain! You're a champ! Quote Link to comment
ColonelChuck Posted January 18, 2017 Author Share Posted January 18, 2017 Well done! Good followup on a non-problem apparently. Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.