Aller au contenu

Photo

Avast Anti-virus and nxcharacter.dll (UPDATED x2)


95 réponses à ce sujet

#1
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages
All,

I am starting a new topic here as a few have popped up this morning, and I'd like to consolodate the discussion.  It appears that the latest update to Avast anti-virus causes it to think that the file "nxcharacter.dll", which is installed along with Dragon Age: Origins, is infected.

Some users may be experiencing startup problems with the game, because this file has been quarentined or removed completely.

As far as I can tell, nxcharacter.dll is part of the PhysX system used by both DAO and DA2.  The general consensus right not is that this is a "false positive" reading on the part of Avast.

I've scanned my own system (I use MS Secutiry Essentials) and have not encountered an issue. 

** UPDATE x2 ** 
It appears Avast has sent out a revised update which fixes the issue.  For those affected, update Avast, then go into Avast's "virus chest" and restore the file.

If the file has already been deleted from the Avast "virus chest", you can either try to find the file online or, safer-- do an uninstall/reboot/reinstall of the game.  If you want to back up saved games first, back up the folder My Documents > Bioware > Dragon Age > Characters.


** UPDATE x1 **


This procedure seems to be userful in circumventing the problem:


Aetika wrote...

Ok, I was finally able to run the game after I read Empherion´s advice (thanks :)) and played around little. Here´s what I did in Avast:

Settings - Exclusions - I added C:Program FilesDragon Agebin_ship* to the list

File System Shield - Expert settings - Exclusions - I added C:Program FilesDragon Agebin_ship* to the list.

Behavior Shield - Expert settings - Trusted processes - I added C:Program FilesDragon AgeDAOriginsLauncher.exe to the list.

Then I restored nxcharacter.dll from virus chest.
As you can see I am no expert, so I basically put Dragon age to any exclusion list I could find :innocent:

Hope this can help others too.


Modifié par RaenImrahl, 04 juin 2011 - 10:04 .


#2
KevDK

KevDK
  • Members
  • 5 messages
I'm experiencing this problem, my Avast! Free (version 6.0.1125 and virus definitions 110604-0) identified this as the Hiloti-CU trojan virus. It would be nice to get some clarification whether this is just Avast! acting up, or whether we can get other virus programs to raise the red flag on this file.

#3
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages
I can send an e-mail to some of the developers... but honestly, it's a weekend and I don't know how fast they'll be able to react.

Let's wait a few hours and see what other data we get here. My gut says this is a false alarm on the part of Avast.

Modifié par RaenImrahl, 04 juin 2011 - 01:49 .


#4
SeiAyshiro

SeiAyshiro
  • Members
  • 1 messages
It'd be pretty awkward if it did turn out to be a virus. I've been playing the game for a few days, had about 20 gameplay hours, and nothing happened. I was playing the game today, everything was fine. I updated Avast and the game crashed, soon to block it from starting up with that notice.

I agree, it's probably a false positive.

#5
Lyrasien

Lyrasien
  • Members
  • 3 messages
Getting the problem here to. Even upon trying to restore it from the quarantine chest the game still won't launch. Tried scanning it on the non-internet computer and no issues were found.

DAO: Ultimate
Avast
Win7

From what I can tell it's not a problem with the game itself, but a false positive from Avast. I'm in the process of re-installing right now.

#6
Aetika

Aetika
  • Members
  • 3 166 messages
I played just fine two days ago, now Avast put nxcharacter.dll into the chest, the game cannot be launched without it. I sent message to Avast, so I am waiting now :/

Modifié par Aetika, 04 juin 2011 - 01:53 .


#7
retterkl

retterkl
  • Members
  • 3 messages
Ok if i've excluded my Dragon Age folder and my disk from scanning will that stop Avast deleting the file?

#8
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages

Aetika wrote...

I played just fine two days ago, now Avast put nxcharacter.dll into the chest, the game cannot be launched without it. I sent message to Avast, so I am waiting now :/


Just curious... DA2 also uses the nxcharacter.dll file... are you having an issue with DA2 as well?

#9
FullMetalHollow0

FullMetalHollow0
  • Members
  • 6 messages
If you go into Avast Virus Chest, you can restore the file and Dragon Age will start working properly again.

#10
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages

retterkl wrote...

Ok if i've excluded my Dragon Age folder and my disk from scanning will that stop Avast deleting the file?


Hard to say for sure... if Avast does any sort of active memory scan... and most a/v software does, then no, it might not.

#11
Aetika

Aetika
  • Members
  • 3 166 messages

RaenImrahl wrote...

Aetika wrote...

I played just fine two days ago, now Avast put nxcharacter.dll into the chest, the game cannot be launched without it. I sent message to Avast, so I am waiting now :/


Just curious... DA2 also uses the nxcharacter.dll file... are you having an issue with DA2 as well?


Just tried. Dragon Age 2 launches. No problems detected.

#12
Lyrasien

Lyrasien
  • Members
  • 3 messages

FullMetalHollow0 wrote...

If you go into Avast Virus Chest, you can restore the file and Dragon Age will start working properly again.


That was the first thing I tried - no go. I even disable Avast entirely once I restored the file and the game still wouldn't launch. Rather than trying to chase the problem down any further I'm just reinstalling it.

#13
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages

Aetika wrote...

Just tried. Dragon Age 2 launches. No problems detected.


Okay... just curious. That makes me suspect that there's something old in the DAO version of the file that is getting the false positive from Avast.  Thanks!

#14
FullMetalHollow0

FullMetalHollow0
  • Members
  • 6 messages

Lyrasien wrote...

FullMetalHollow0 wrote...

If you go into Avast Virus Chest, you can restore the file and Dragon Age will start working properly again.


That was the first thing I tried - no go. I even disable Avast entirely once I restored the file and the game still wouldn't launch. Rather than trying to chase the problem down any further I'm just reinstalling it.


Well, it worked me.

#15
Athenenocturna

Athenenocturna
  • Members
  • 1 messages
I have the same annoying problem, also there is always a problem with re-installing this bad boy, (extra content shows up after 2 weeks of playing or not at all.. :() I would love to see some non re-install fix to this bastard..
I also have
DAO: Ultimate
Avast
Win7

#16
thewrongthing

thewrongthing
  • Members
  • 7 messages
Same issue here, though after moving nxcharacter.dll to the virus chest I ran a Boot Scan, which returned Hiloti-CU trojan virus in my System_Volume_Information folder. Now, I don't know much about viruses, but doesn't this indicate that it's a real infection and not a false positive?

#17
RaenImrahl

RaenImrahl
  • Members
  • 5 386 messages

thewrongthing wrote...

Same issue here, though after moving nxcharacter.dll to the virus chest I ran a Boot Scan, which returned Hiloti-CU trojan virus in my System_Volume_Information folder. Now, I don't know much about viruses, but doesn't this indicate that it's a real infection and not a false positive?


Are you using Avast?

#18
thewrongthing

thewrongthing
  • Members
  • 7 messages
Yes - Avast.

#19
Lyrasien

Lyrasien
  • Members
  • 3 messages

thewrongthing wrote...

Same issue here, though after moving nxcharacter.dll to the virus chest I ran a Boot Scan, which returned Hiloti-CU trojan virus in my System_Volume_Information folder. Now, I don't know much about viruses, but doesn't this indicate that it's a real infection and not a false positive?


Doubt it's real. I had run a check on my computer the other day and it was fine. Installed and been playing for a couple days no problem. Had the 'virus report' pop up today and couldn't launch the game. I uninstalled, scanned, and started to reinstall. Immediately Avast picked up the file, that was being copied from the cd, as a virus and quarintined it. I cancled the install, disabled avast, and am in the process of installing still.

It's most definitely a false positive.

#20
KevDK

KevDK
  • Members
  • 5 messages
Can we get some people with a different anti-virus program than Avast! to run some tests on it? If they all show negative, then it would seem more likely that Avast! has gotten some strange new definitions.

#21
Manet-

Manet-
  • Members
  • 1 messages
avast and one other scanner seem to think there is trojan in nxcharacter.dll

File name:
nxcharacter.dll
Submission date:
2011-06-04 14:20:57 (UTC)
Current status:
queued (#33) queued (#33) analysing finished
Result:
3/ 42 (7.1%)

VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.06.04.00 2011.06.03 -
AntiVir 7.11.9.24 2011.06.04 -
Antiy-AVL 2.0.3.7 2011.06.04 -
Avast 4.8.1351.0 2011.06.04 Win32:Hiloti-CU
Avast5 5.0.677.0 2011.06.04 Win32:Hiloti-CU
AVG 10.0.0.1190 2011.06.04 -
BitDefender 7.2 2011.06.04 -
CAT-QuickHeal 11.00 2011.06.04 -
ClamAV 0.97.0.0 2011.06.04 -
Commtouch 5.3.2.6 2011.06.04 -
Comodo 8947 2011.06.04 -
DrWeb 5.0.2.03300 2011.06.04 -
Emsisoft 5.1.0.5 2011.06.04 -
eSafe 7.0.17.0 2011.06.02 -
eTrust-Vet 36.1.8366 2011.06.03 -
F-Prot 4.6.2.117 2011.06.03 -
F-Secure 9.0.16440.0 2011.06.04 -
Fortinet 4.2.257.0 2011.06.04 -
GData 22 2011.06.04 Win32:Hiloti-CU
Ikarus T3.1.1.104.0 2011.06.04 -
Jiangmin 13.0.900 2011.06.01 -
K7AntiVirus 9.104.4763 2011.06.03 -
Kaspersky 9.0.0.837 2011.06.04 -
McAfee 5.400.0.1158 2011.06.04 -
McAfee-GW-Edition 2010.1D 2011.06.04 -
Microsoft 1.6903 2011.06.04 -
NOD32 6179 2011.06.04 -
Norman 6.07.07 2011.06.04 -
nProtect 2011-06-04.01 2011.06.04 -
Panda 10.0.3.5 2011.06.04 -
PCTools 7.0.3.5 2011.06.03 -
Prevx 3.0 2011.06.04 -
Rising 23.60.03.09 2011.06.03 -
Sophos 4.66.0 2011.06.04 -
SUPERAntiSpyware 4.40.0.1006 2011.06.04 -
TheHacker 6.7.0.1.215 2011.06.02 -
TrendMicro 9.200.0.1012 2011.06.04 -
TrendMicro-HouseCall 9.200.0.1012 2011.06.04 -
VBA32 3.12.16.0 2011.06.03 -
VIPRE 9482 2011.06.04 -
ViRobot 2011.6.4.4496 2011.06.04 -
VirusBuster 14.0.67.1 2011.06.04 -
Additional information
Show all

#22
Kiardras

Kiardras
  • Members
  • 2 messages
Turned Avast off for ten minutes after restoring the file, the game ran fine. Just played an hour or two with no problems - didn't have one when avast turned back on again.

I'm pretty confident its just a false positive not an actual trojan, but it can be a PITA to get it running again.

#23
gravedancer

gravedancer
  • Members
  • 3 messages
I started having the same problem, but I dont think its related to the most recent definitions file from avast. I say that because I started having odd crashes in DAO yesterday afternoon (never had a crash before in dozens of hours of gameplay), and my Avast didnt pop up a warning about nxcharacter.dll until this morning. I also checked Avast and it didnt download the latest definitions until 330 am this morning.

I just submitted the file to Avast as a false positive from the "virus chest", but who knows how long it will take them to see it and act on it.

#24
Empherion

Empherion
  • Members
  • 1 messages
I had the same problem, but I solved it. Go into the Anti virus chest. Move the .dll file to the bin_ship folder in the Dagon Age folder. Then tell Avast not to check the Dragon Age folder. If it don't check it, it won't find it. I hope I could help.

#25
Ezekiel_J

Ezekiel_J
  • Members
  • 1 messages

FullMetalHollowO wrote...

If you go into Avast Virus Chest, you can restore the file and Dragon Age will start working properly again.


Working great :) Thx

Modifié par Ezekiel_J, 04 juin 2011 - 03:19 .