Comodo stopping me from using Texmod

[DecimaTech]

Add texmod to the excluded application tab of AV exclusions. This should allow you to use texmod without issues.

[FreckledGriffin]

@futuretech post:21

Add texmod to the excluded application tab of AV exclusions. This should allow you to use texmod without issues.

I did that twice already. It still won’t work.

[DecimaTech]

Can you export your config and add it to a compressed zip folder and attach? Also export the AV logs and save it as a .txt extension and attach.

[FreckledGriffin]

@futuretech post:23

Can you export your config and add it to a compressed zip folder and attach? Also export the AV logs and save it as a .txt extension and attach.

[umesh]

Hi FreckledGriffin,
Please share exact steps and mods, seems there is some file that gets created temporarily and gets detected.

Thanks
-umesh

@FreckledGriffin post:1

I’m able to open up Texmod fine, select my desired mods, etc., but when I select the Run button at the bottom, the program will crash for a second (with the “Not Responding” text at the top), then I get an alert from Comodo telling me about a Malicious File

[FreckledGriffin]

@umesh post:25

Hi FreckledGriffin,
Please share exact steps and mods, seems there is some file that gets created temporarily and gets detected.

Thanks
-umesh

…You mean send you the actual mod files I use? Well I tried to do it here, but it failed it post it so I guess they’re too big to upload. I can send links to the mods though:

http://social.bioware.com/project/8259/#details
http://social.bioware.com/project/8265/
http://social.bioware.com/project/8266/
http://nerdykani.blogspot.ca/2013/01/me2-better-hair-textures.html

ME1 Improved Bun Textures at Mass Effect Nexus - Mods and community?

[DecimaTech]

Umesh here is the file I was able to grab

VirusTotal

I am also attaching a procmon log showing that texmod is creating the file but CIS does not detect it as such according to CIS JSON db of the tmp file which is also attached.

@FreckledGriffin post:26

…You mean send you the actual mod files I use? Well I tried to do it here, but it failed it post it so I guess they’re too big to upload. I can send links to the mods though:

BioWare Social Network
BioWare Social Network
BioWare Social Network
http://nerdykani.blogspot.ca/2013/01/me2-better-hair-textures.html

ME1 Improved Bun Textures at Mass Effect Nexus - Mods and community?

How I tested was with ME2 demo from steam and I added the me2launcher and me2.exe from the binary folder in addition to texmod to the AV excluded applications and that stopped the malware warnings.

[umesh]

Thanks a lot futuretech,
The file seems to be heavily detected, i have passed to team for false-positive review.

VirusTotal

@futuretech post:27

How I tested was with ME2 demo from steam and I added the me2launcher and me2.exe from the binary folder in addition to texmod to the AV excluded applications and that stopped the malware warnings.

May you please provide sha-1 of me2launcher and me2.exe as well?

Thanks
-umesh

@futuretech post:27

Umesh here is the file I was able to grab
VirusTotal

I am also attaching a procmon log showing that texmod is creating the file but CIS does not detect it as such according to CIS JSON db of the tmp file which is also attached.
How I tested was with ME2 demo from steam and I added the me2launcher and me2.exe from the binary folder in addition to texmod to the AV excluded applications and that stopped the malware warnings.

[DecimaTech]

MassEffect2Launcher.exe 74cb11fa9e907f4c73aba8db813192dacd98b64d
MassEffect2.exe 74d86018404c6320d3319913108309f533601d1d

[umesh]

Thanks, seems these files are already safe in database.

@futuretech post:29

MassEffect2Launcher.exe 74cb11fa9e907f4c73aba8db813192dacd98b64d
MassEffect2.exe 74d86018404c6320d3319913108309f533601d1d

[umesh]

Hi futuretech,
False-positive has been resolved in database v27653.

May you please try to run application without any exclusions?

In case any file is detected, please share VirusTotal link.

Thanks
-umesh

@umesh post:28

Thanks a lot futuretech,
The file seems to be heavily detected, i have passed to team for false-positive review.
VirusTotal

May you please provide sha-1 of me2launcher and me2.exe as well?

Thanks
-umesh

[DecimaTech]

@umesh post:31

Hi futuretech,
False-positive has been resolved in database v27653.

May you please try to run application without any exclusions?

In case any file is detected, please share VirusTotal link.

Thanks
-umesh

Looks good I am not getting any detection alerts thanks.

[umesh]

Great!!
@FreckledGriffin can you please try?

@futuretech post:32

Looks good I am not getting any detection alerts thanks.

[FreckledGriffin]

@umesh post:33

Great!!
[at]FreckledGriffin can you please try?

Both games work with Texmod now! Thank you both for putting a lot of time and effort into finding out the problem and fixing this! :-TU