Tirpitz25Ref 4 Report post Posted June 14, 2023 (edited) Hello WT forums, Recently I've installed the update La Royale and my anti-virus (Norton) picked up a file from the steam war thunder directory, and I am wondering if that was a vital file as my game keeps crashing time to time. The file is labeled "Heur.AdvML.B" and it has been flagged as a high risk trojan file, and I also think it is labeled as "Client_86.dll"? There's also the possibility that it's the place it got removed from. I also did look into the Norton community, and they said it was either a virus or a Malware database/AI tool? Not sure. Anyone else having this problem, and am I able to get any info about this? Thank you. Edit: It is now crashing my game when ever I enter matches, and it did remove Client_86.dll too, I am also posting here since the technical problems discussion is closed for me. Need help ASAP, and If needed should I create a ticket to war thunder/Gajin support? Edited June 14, 2023 by Tirpitz25Ref 1 1 3 Share this post Link to post Share on other sites More sharing options...
Torpedosniper 15 Report post Posted June 14, 2023 Heyho, my Norton 360 also found this Heur.AdvML.B file in the Client_86.dll folder and "neutralized" it! My game hasn't crashed yet. The client keeps reloading these files when I start it, and then it's detected and blocked by Norton. Greetings from T. Share this post Link to post Share on other sites More sharing options...
Tirpitz25Ref 4 Report post Posted June 14, 2023 12 minutes ago, Torpedosniper said: Heyho, my Norton 360 also found this Heur.AdvML.B file in the Client_86.dll folder and "neutralized" it! My game hasn't crashed yet. The client keeps reloading these files when I start it, and then it's detected and blocked by Norton. Greetings from T. Thanks for your response! Glad I'm not the only one getting this, Though one thing is that I just recently scanned again and it did the same thing but for a different file called "tools.zip" Is the Client_86.dll folder the only one you're experiencing or is it other ones? And also, I did go into Safe Mode on W10 and scanned, and I picked the other one up there. It's classified as a real file though Norton thinks it's bad, and now it's in other files too. Thanks for your response and- Woah, it just picked it up again, not sure what's up with this but it's quite crazy. Share this post Link to post Share on other sites More sharing options...
BeefSupream 1 Report post Posted June 14, 2023 Same here with this trojan. Norton picked it up and removed it. Ran a scan of the Warthunder file on my drive and Norton confirmed the removal. I haven't tried launching the game yet, until I finished my scans. If you are having issues with the WT client that you believe is directly attributed to this file, please open a ticket with Gaijin. You might want to do a screenshot of the resolved threat in Norton, and include it in your trouble ticket. Share this post Link to post Share on other sites More sharing options...
Stona_WT 72,761 Report post Posted June 14, 2023 Our software do not contains any viruses or other harmful software. Please contact your AV software provider and ask them to update database. What your A-V software is detecting is called "false-positive". 1 1 Share this post Link to post Share on other sites More sharing options...
BeefSupream 1 Report post Posted June 14, 2023 As follow up to my post of a few minutes ago, I have opened a trouble ticket on the Gaijin support website. I have included screenshots of the Norton file removal notification with the WT launcher in the background, as well as the Norton notice of file removal showing the file was in the Warthunder game folder. 1 Share this post Link to post Share on other sites More sharing options...
CraniX 0 Report post Posted June 14, 2023 Share this post Link to post Share on other sites More sharing options...
Formaldehyder 0 Report post Posted June 15, 2023 Go into the advanced launcher settings and click "check files" it worked for me and Norton no longer flag the game. Share this post Link to post Share on other sites More sharing options...
Threashold 224 Report post Posted June 15, 2023 Sorry to ask but why not use windows defender? it didn't flag it as virus. Share this post Link to post Share on other sites More sharing options...
SHadowMaster 5 Report post Posted June 15, 2023 rofl Meybe do some thing about it and dont do that AUTOMATIC answer.... False-possessive is better then no reaction at all. Fix ur digital sign 1 Share this post Link to post Share on other sites More sharing options...
Torpedosniper 15 Report post Posted June 16, 2023 (edited) On 14/06/2023 at 19:53, Stona said: Our software do not contains any viruses or other harmful software. Please contact your AV software provider and ask them to update database. What your A-V software is detecting is called "false-positive". Why should I do their job?! Deliver your products in good order and there will be no complications! The problem has now been solved by your people. The file is no longer dangerous or was no longer used.... Greetings from T. Edited June 16, 2023 by Torpedosniper Share this post Link to post Share on other sites More sharing options...
IronTwinkie 0 Report post Posted June 17, 2023 I got this also, Heur.AdvML.B I did a total system scan and have had no returns since 6/14. Do non-Norton user also get this file flagged? Share this post Link to post Share on other sites More sharing options...