-
[HOW TO] Solve your antivirus problems
Hi all!
As you probably already know, antivirus systems does not like obfuscated .exe files.
Q: What obfuscated means?
A: It is the protection how I hide HUD's source code from shady eyes.
Q: Which obfuscator do you use?
A: ConfuserEx
Q: How do you know ConfuserEx does not add a trojan to the .exe?
A: It is opensource and I compile it myself, so it can't do that.
Q: Any source ConfuserEx causes this?
A: Virus Detection * Issue #17 * yck1509/ConfuserEx * GitHub
Q: Why does this f*ck up antivirus software?
A: Because it looks like something trying to hide it's real code pattern. In fact it looks like something really messed up.
Q: Could you turn it off?
A: No.
Q: What can I do?
A: You have multiple options:
- Entirely disable your AV software. This is not recommended because it makes your system vulnerable.
- Add TurboHUD's folder to a feature called "whitelist". Most AV software has this feature. Be aware that some of them has multiple whitelists for multiple features so be sure you added HUD to all.
- Send a bugreport to your AV software support service, with TurboHUD.exe file, and this link to ConfuserEx
- Pray every day, but I don't think it would solve the problem.
Be aware that all antivirus-related topics will be deleted in the future.
If you want to ask for help, do it here.
-
Post Thanks / Like - 4 Thanks
-
- copied my original post from turbohud.freeforums.net -
-
Post Thanks / Like - 2 Thanks
-
Member
Super Awesome Sparke Cake
For those with Avast AV:
Last edited by Gurbak; 03-25-2017 at 02:03 PM.
-
Member
been using turbohud for a long time (so glad it's back!) and I've never had my AV trigger until now. This version for game client 2.5.0.44247 triggered AV, Avast in particular, and yeah it's up to date.
on a side note this is the first time I've needed to exclude something in avast and what a PiTA that is, so much so I might just uninstall it, super annoying. Thanks for the little guide, but that doesn't exclude the temp location when extracting the file initially. That location is random each time you extract so you can never exclude it.
Last edited by Screwyluie; 03-31-2017 at 07:40 AM.
-
Member
-
Member
"Unrecognized executable or library. Terminating.
Turbo.Contracts.dll"
Any ideas as to why I'm getting this message every time I try to run THUD?
-
Active Member
You installed TH into a folder with other dlls or executables.
TurboHUD has to be unzipped into an empty folder.
-
★ Elder ★
i talked to the guys over at kaspersky and within 24hours they are releasen an update to stop flagging turbohud as they tore it apart and deemed it safe.
-
Post Thanks / Like - 2 Thanks
-
Member
Actually I wasn't putting it in "run in windows 7 compatibility mode"... I didn't realize that's how it works now... but yeah, once I did that, it fixed it... runs perfectly.
I just had to tell windows defender to allow it and I'm good to go. Thanks for the reply.
-
Member
Does anyone know how to trust TurboHUD.exe with mcafee as it automatically gets quarantined so I am not able to trust it as I cannot extract it from the .zip file.
-
Member
Originally Posted by
BalPorridge
Does anyone know how to trust TurboHUD.exe with mcafee as it automatically gets quarantined so I am not able to trust it as I cannot extract it from the .zip file.
same issue with avast. you have to disable AV entirely... it should have a pause function. Get it extracted and then add the final destination to the whitelist. You'll have to pause your AV every time you update.
I'm still a little bothered by the fact that this is the first time turbohud has ever triggered AV for me... old site shutdown, new site up and now AV triggered... it throws up mental red flags for me.
-
Member
Originally Posted by
Screwyluie
same issue with avast. you have to disable AV entirely... it should have a pause function. Get it extracted and then add the final destination to the whitelist. You'll have to pause your AV every time you update.
I'm still a little bothered by the fact that this is the first time turbohud has ever triggered AV for me... old site shutdown, new site up and now AV triggered... it throws up mental red flags for me.
The problem is is that I can't exclude files with my AV off with McAfee. If I turn off the AV then the excluded items field is grayed out meaning I don't have a to trust it.
-
Member
Originally Posted by
BalPorridge
The problem is is that I can't exclude files with my AV off with McAfee. If I turn off the AV then the excluded items field is grayed out meaning I don't have a to trust it.
that's fine, exclude it after you turn it back on. The real issue is the extraction puts the file in a temp folder with a random name so excluding it doesn't work, next time the path is different. So the file never makes it where it's supposed to go. Pause the AV, extract the file, then unpause and proceed. Either exclude the file right away (AV won't catch the file until you try and access it) or open the file and the AV will popup and then you can either respond or if it's set to auto then go into the history/virus lockup/cache/whatever it's called in yours and restore/whitelist the app.
You won't have to do the last half each time. once you get it whitelisted in it's final destination then you just have to pause while you extract the file, unpause and all should be well again.
-
Member
I can't exclude the file even if I'm not accessing it, the file is automatically deleted and I can't do anything about it.
-
Contributor
pause your antivirus
add THud too the ignore list of your antivirus
check again.