Virus within client.exe

[TheGrimReefer]

So I'm not sure if anyone has had this happen but for the past week or so, I have had to uninstall and reinstall UO several times. At first I will lose connection and it will kick me out of UO, so naturally I try to restart it. Each time I try to start it up it will go through the patch verification then give me the error. "The patch feature failed to launch the game executable. I have check the files within the UO folder and my client.exe is gone.

I have also tried to start UO with UOAssist and I get the error " UO information Missing". So I I assume its due to the client.exe missing. When I reinstall UO and try to link the directory, I can find client.exe but when I click on it, it tells me that the file client.exe is infected with a virus and deletes the files.

Now I have run virus scan and it finds nothing as the file was already deleted through UOAssist.

If anyone can help or have information about this please let me know so I can finally play the game again.

Thanks,

TheGrimReefer

 

[Gilmour]

I heard of someone else getting virus warning on client.exe, my guess is that it is probably what is known as a false positive, and that your anti virus software has automaticly made steps to quanrentine it.

 

[Piotr]

Let me guess, you use Norton or Kaspersky, right?

Someone had a similar problem a few weeks ago...

 

[TheGrimReefer]

No I dont use either I just use Windows Defender. Also as Im installing the patches, it will alert me to malware.

 

[JC the Builder]

Virus software have a feature to submit a file for them to review. You should definitely do that so they can fix the problem.

 

[Mervyn]

I don't have any antivirus, i even have defender turned off, however i do a scan once a year with microsoft safety scanner and got what i would call a false positive. It seems the worst malware at the moment is the antimalware itself

 

[RockoNV]

Turn off your virus protection and run the client. If it runs ok, you have your answer. Also, try running the client rather than starting the game via the patcher. See if that makes a diff for you as well.

 

[Parnoc]

Best thing to keep this from happening is make sure UO executable files, UO Assist files, Cartographer Automap files, etc are on your whitelist/exceptions page on your antivirus and firewall program options. This should cure all those false positives for antivirus/malware programs.

 

[petemage]

So I'm not sure if anyone has had this happen but for the past week or so, I have had to uninstall and reinstall UO several times. At first I will lose connection and it will kick me out of UO, so naturally I try to restart it. Each time I try to start it up it will go through the patch verification then give me the error. "The patch feature failed to launch the game executable. I have check the files within the UO folder and my client.exe is gone.

I have also tried to start UO with UOAssist and I get the error " UO information Missing". So I I assume its due to the client.exe missing. When I reinstall UO and try to link the directory, I can find client.exe but when I click on it, it tells me that the file client.exe is infected with a virus and deletes the files.

Now I have run virus scan and it finds nothing as the file was already deleted [...].

It is not unlikely that you really got some malware messing with your PC. At least AVs dont seem to report false positives on CC; neither Kaspersky nor Norton to specifically name that two: Antivirus scan for ff61cce4d55c32dbf45c69c7c62c8f9e7bf72bf214c5e29f769b9f562ecf9210 at 2016-03-28 14:19:47 UTC - VirusTotal

Turn off your virus protection and run the client. If it runs ok, you have your answer.

Probably the worst advice in this situation if you care for your PC. I mean, unless all you care about is being able to play UO no matter what it may cost you.

 

[GarthGrey]

It is not unlikely that you really got some malware messing with your PC. At least AVs dont seem to report false positives on CC; neither Kaspersky nor Norton to specifically name that two: Antivirus scan for ff61cce4d55c32dbf45c69c7c62c8f9e7bf72bf214c5e29f769b9f562ecf9210 at 2016-03-28 14:19:47 UTC - VirusTotal



Probably the worst advice in this situation if you care for your PC. I mean, unless all you care about is being able to play UO no matter what it may cost you.

Yeah, I suppose if you open up every single email that you receive regardless who it's from, or if you download things from cnet , or if you surf for a lot of porn, yeah you're probably going to be in trouble. However, if you have the slightest amount of common sense, your pc world won't come to an end just because you disabled your AV software.....just sayin.

 

[RockoNV]

Probably the worst advice in this situation if you care for your PC. I mean, unless all you care about is being able to play UO no matter what it may cost you.

If your machine is infected, then yes.

 

[Barok]

If your machine is truly infected the virus will be in more than one file.

 

[Kojak]

I already posted this on the other thread - anti-virus programs don't like executables that modify themselves - which is exactly what patching is - get with the program people

 

[Barok]

The patcher patches the client, the client doesn't patch itself.

 

[Lord Trollo]

I already posted this on the other thread - anti-virus programs don't like executables that modify themselves - which is exactly what patching is - get with the program people

i apologize for not caring about your anti-virus know-how and not caring what you posted in another thread.

 

[Deep Ellum Dan]

uggg, the patcher and the client (CC) does not ever show as being a virus/malware unless you are infected and the variant is one that inserts worms in executables. FYI

 

[petemage]

With the sparse information by the OP its impossible to give more than general advice. Could be as well UOA that triggers this, as it basically employs the same techniques that malware does to "infect" the CC. Or the patcher, as @Kojak pointed out. Or some other crap thats running but not mentioned

 

[Vor]

When I had this issue with Kaspersky I could just roll back the changes. Was much quicker than reinstalling.

 

[AtlanticRealtor]

It is True
After a Windows 10 update on 2 different computers (most like the Windows Defender was updated as well) as soon as the computer restarted it flagged client.exe as a potential virus, and deleted file!!

I had to go into the windows defender settings, manually overwrite , and tell WD that the file is Not a virus... (Luck i had a copy of the client.exe on another laptop and problem solved)

but, the factory W10 after updated (06/14) it flagged the client.exe

 

[UNKNOWN of Atlantic]

I watched a video on youtube where you can shut down all windows 10 Privacy stuff (where it sends a lot info of you computer to Microsoft) and in that he stated with every new download you need to recheck your setting cus Microsoft re-defaults back to what they want so it may also wipe your Ok program Not virus list too ...just staying ..... I just watched it & did all that by settings I didn't download the program Do a search for (Disable Windows 10 Spying - Privacy & Security) Barnacules is one I watched

 

[Blackie]

Most(all?) virus software gives you even more failure points, they make your system weaker imo. How? The developers leave backdoors, they provide weaknesses that can be exploited themselves, they can be tricked into making changes to a system.

The best solution is not to visit shady sites anymore, you know the kind I'm talking about

I'm not against anti-virus software, I just think it should stay off until I TELL it to run once. I'm not down with this 'check everything all the time and report home hourly for updates' crap. That being said I would be concerned about being kicked out of UO periodically, it suggests someone else may be logging in.