Anti-virus Targets Ffxi.dll As Trojan

Eorzea Time
 
 
 
Language: JP EN FR DE
Version 3.1
New Items
users online
Forum » Everything Else » Tech Support » Anti-virus targets ffxi.dll as trojan
Anti-virus targets ffxi.dll as trojan
 Lakshmi.Raerie
Offline
Server: Lakshmi
Game: FFXI
user: Rae
Posts: 98
By Lakshmi.Raerie 2014-11-17 03:21:39
Link | Quote | Reply
 
Cerberus.Conagh said: »
Phoenix.Tigertail said: »
Tonight Norton 360 quarantined ffxi.dll as a Trojan and malware. Is this happening to anyone else? Or is Norton being overprotective again.

Norton causes millions of issues, just uninstall it and use something not the failure that is Norton.

Any suggestions on better anti-virus programs?
Offline
Posts: 42646
By Jetackuu 2014-11-17 03:36:02
Link | Quote | Reply
 
Lakshmi.Raerie said: »
Cerberus.Conagh said: »
Phoenix.Tigertail said: »
Tonight Norton 360 quarantined ffxi.dll as a Trojan and malware. Is this happening to anyone else? Or is Norton being overprotective again.

Norton causes millions of issues, just uninstall it and use something not the failure that is Norton.

Any suggestions on better anti-virus programs?
microsoft security essentials is rather non-invasive (as far as a/vs go) and is free, assuming you're on windows 7.
 Leviathan.Chaosx
Offline
Server: Leviathan
Game: FFXI
user: ChaosX128
Posts: 20284
By Leviathan.Chaosx 2014-11-17 04:50:05
Link | Quote | Reply
 
Lakshmi.Raerie said: »
Cerberus.Conagh said: »
Phoenix.Tigertail said: »
Tonight Norton 360 quarantined ffxi.dll as a Trojan and malware. Is this happening to anyone else? Or is Norton being overprotective again.

Norton causes millions of issues, just uninstall it and use something not the failure that is Norton.

Any suggestions on better anti-virus programs?
https://www.malwarebytes.org/
I've been using the free version since its release and paid version since I upgraded to windows 7. Not one problem ever.

Used the free version a ton of times on XP systems when no other antivirus program would accurately detect and remove.
Offline
Posts: 42646
By Jetackuu 2014-11-17 04:51:48
Link | Quote | Reply
 
The free version doesn't do realtime, but it is pretty good at removing crap once you're actually infected.
[+]
 Leviathan.Chaosx
Offline
Server: Leviathan
Game: FFXI
user: ChaosX128
Posts: 20284
By Leviathan.Chaosx 2014-11-17 04:56:00
Link | Quote | Reply
 
Not sure if this is related, but this was posted 3 days ago.

Rogue .SCR File Links Circulating in Steam Chat
 Leviathan.Chaosx
Offline
Server: Leviathan
Game: FFXI
user: ChaosX128
Posts: 20284
By Leviathan.Chaosx 2014-11-17 04:59:45
Link | Quote | Reply
 
Jetackuu said: »
The free version doesn't do realtime, but it is pretty good at removing crap once you're actually infected.
I lucked out and got the paid version for a one time fee for life, before they moved to yearly pricing. But yeah it's by far the best for removing crap. The paid realtime can be a bit sensitive at times, but still remains by far the least intrusive when it comes to system performance.
 Fenrir.Mariane
Offline
Server: Fenrir
Game: FFXI
user: leo
Posts: 1766
By Fenrir.Mariane 2014-11-17 05:37:20
Link | Quote | Reply
 
Leviathan.Draylo said: »
Go to one of them that you are able to log in, go into the ffxi folder copy the ffxi.dll and paste in the one that isn't working. You can connect them to a network to share files.

DON'T EVER SHARE the FFXI folder on the network.

It will *** the windows installer registry entry for FFXI and then POL will start to beg for the game install files when you push the "PLAY" button on FFXI page inside POL Viewer.

If you need to share the FFXI files on the network, copy them to another folder and then share that.
Offline
Posts: 695
By wormfeeder 2014-11-17 06:18:01
Link | Quote | Reply
 
Use nod32 least invasive A/V I have ever used.
Offline
Posts: 695
By wormfeeder 2014-11-17 07:10:56
Link | Quote | Reply
 
http://www.playonline.com/ff11us/polnews/news23829.shtml
 Ragnarok.Sekundes
Offline
Server: Ragnarok
Game: FFXI
user: Sekundes
Posts: 4189
By Ragnarok.Sekundes 2014-11-17 07:57:20
Link | Quote | Reply
 
For once, the problem is not SE's fault and they still respond with the same thing.
 Asura.Kaoriasada
Offline
Server: Asura
Game: FFXI
Posts: 108
By Asura.Kaoriasada 2014-11-17 08:40:23
Link | Quote | Reply
 
Where do you locate this FFXi.dll?
 Asura.Calatilla
Offline
Server: Asura
Game: FFXI
user: Calatilla
Posts: 2507
By Asura.Calatilla 2014-11-17 08:45:19
Link | Quote | Reply
 
Asura.Kaoriasada said: »
Where do you locate this FFXi.dll?

Square Enix/Final Fantasy XI root folder.
 Asura.Kaoriasada
Offline
Server: Asura
Game: FFXI
Posts: 108
By Asura.Kaoriasada 2014-11-17 08:46:08
Link | Quote | Reply
 
Thank you! :)
 Asura.Kaoriasada
Offline
Server: Asura
Game: FFXI
Posts: 108
By Asura.Kaoriasada 2014-11-17 09:38:28
Link | Quote | Reply
 
It turned out that Norton deleted my FFXi.dll too. If you need it back to download, I uploaded the one my friend sended me. :)

http://www.megafileupload.com/en/file/580474/FFXi-rar.html
 Sylph.Ashiya
Offline
Server: Sylph
Game: FFXI
user: Ashee
Posts: 144
By Sylph.Ashiya 2014-11-17 09:41:22
Link | Quote | Reply
 
it shouldn't delete the file it saves it in the quarantine folder, which you can restore without having to re-download FFXI
 Asura.Kaoriasada
Offline
Server: Asura
Game: FFXI
Posts: 108
By Asura.Kaoriasada 2014-11-17 09:41:49
Link | Quote | Reply
 
Sylph.Ashiya said: »
it shouldn't delete the file it saves it in the quarantine folder, which you can restore without having to re-download FFXI

Mine deleted.
 Sylph.Ashiya
Offline
Server: Sylph
Game: FFXI
user: Ashee
Posts: 144
By Sylph.Ashiya 2014-11-17 09:43:05
Link | Quote | Reply
 
Asura.Kaoriasada said: »
Sylph.Ashiya said: »
it shouldn't delete the file it saves it in the quarantine folder, which you can restore without having to re-download FFXI

Mine deleted.

Odd, lol
 Asura.Kaoriasada
Offline
Server: Asura
Game: FFXI
Posts: 108
By Asura.Kaoriasada 2014-11-17 10:00:36
Link | Quote | Reply
 
Sylph.Ashiya said: »
Asura.Kaoriasada said: »
Sylph.Ashiya said: »
it shouldn't delete the file it saves it in the quarantine folder, which you can restore without having to re-download FFXI

Mine deleted.

Odd, lol

I didn't re-install FFXi. I only got FFXi.dll from another friend and copied into that folder.
 Lakshmi.Neboh
Offline
Server: Lakshmi
Game: FFXI
user: Neboh
Posts: 458
By Lakshmi.Neboh 2014-11-17 10:53:20
Link | Quote | Reply
 
Some AVs allow you to restore those quarantined files. But I agree, it gets annoying if you don't add it to the AV's exception list.
Offline
Posts: 695
By wormfeeder 2014-11-17 11:16:43
Link | Quote | Reply
 
http://www.playonline.com/ff11us/polnews/news23829.shtml
 Bismarck.Hsieh
Offline
Server: Bismarck
Game: FFXI
user: Hsieh
Posts: 709
By Bismarck.Hsieh 2014-11-17 12:40:36
Link | Quote | Reply
 
Where can I download the newest POL? For some reason, my POL reverted back 1.18 and crashes when I load it up.
 Lakshmi.Neboh
Offline
Server: Lakshmi
Game: FFXI
user: Neboh
Posts: 458
By Lakshmi.Neboh 2014-11-17 12:45:00
Link | Quote | Reply
 
http://www.playonline.com/ff11us/download/media/install_win.html
 Leviathan.Draylo
Offline
Server: Leviathan
Game: FFXI
user: Draylo
By Leviathan.Draylo 2014-11-17 13:26:15
Link | Quote | Reply
 
It deleted mine too but oddly when I replaced it some programs can't find my character.
 Leviathan.Draylo
Offline
Server: Leviathan
Game: FFXI
user: Draylo
By Leviathan.Draylo 2014-11-17 13:40:20
Link | Quote | Reply
 
http://forum.square-enix.com/ffxi/threads/45128-Current-Known-Issue-for-Windows-Version-%28Nov.-17%29
 Bismarck.Hsieh
Offline
Server: Bismarck
Game: FFXI
user: Hsieh
Posts: 709
By Bismarck.Hsieh 2014-11-17 14:43:12
Link | Quote | Reply
 
That link is for the whole game install. There one just for pol? It use to be easy but I don't want to download 4 gbs just for a pol viewer update.
Offline
Posts: 42646
By Jetackuu 2014-11-17 15:51:04
Link | Quote | Reply
 
Bismarck.Hsieh said: »
That link is for the whole game install. There one just for pol? It use to be easy but I don't want to download 4 gbs just for a pol viewer update.


http://www.playonline.com/ff11us/download/media/vista01.html?pageID=media

it's right on the pol site...

full client is as well:

http://gdl.square-enix.com/ffxi/download/us/FFXISETUP.exe
http://gdl.square-enix.com/ffxi/download/us/FINALFANTASYXI.Data.001
http://gdl.square-enix.com/ffxi/download/us/FINALFANTASYXI.Data.002
http://gdl.square-enix.com/ffxi/download/us/FINALFANTASYXI.Data.003
 Asura.Slugman
Offline
Server: Asura
Game: FFXI
user: Sluggo
Posts: 426
By Asura.Slugman 2014-11-17 16:06:39
Link | Quote | Reply
 
What is this testing false-positive for? Suspicious cloud?
Offline
Posts: 42646
By Jetackuu 2014-11-17 16:08:42
Link | Quote | Reply
 
Leo said it in another thread, apparently some malware is using similar methods to SE's anti-tampering stuff so in an effort to flag them it's flagging this legit file too.