Help! The PC application is detected as Virus. What can I do?
An Antivirus Application is a useful tool for many Windows PC Users, because it protects against virus and trojans.
Unfortunately these application are not perfect and often detect so-called False/Positives. SIM Dashboard is affected by those issues from time to time too.
SIM Dashboard contains some in-built features, which can result in such a wrong detection:
- in the settings is an option to allow the user to put SIM Dashboard in the Autostart of the System
- for some games (e.g. Richard Burns Rally) it is required to read the data directly from the memory of the game, which is treated as potential risk
- to make the setup as easy as possible, the application can modify the configuration files of the Games automatically. To do that it must have write access to the config files of course, which is detected as a potential risk by the Antivirus application
- the telemetrydata (RPM, Speed, and so on), which is read from the games is send via network to the Android devices
The reason for the False/Positives is simple. Today's Anti Virus Application miss the target and lock not only real virus, but also applications which are classified as potential threats. This classification is not only based on heuristics (Detection based on application activities like: Application uses this resource, application modifies this file, see the list above) but also the number of installations of a software is taken into consideration. The idea is: If there are many users of a software(-version) without issues, the software is classified as secure.
With every update of my software these algorithms start the classification again and report my application as potential risk, because this version is less widespread (of course, because the new update is completly new at this time and less users have it already installed). Over time enough users have installed the software and the threat rating in the antivirus application is back to standard.
If the SIM Dashboard Software is detected as potential Virus, Malware or Trojan by your Anti Virus application, this is a false report which you need to ignore.
To (continue) use/using the application you may need to disable your Antivirus Software during the installation of SIM Dashboard and add an exception for SIM Dashboard in your Anti Virus Application, so that my application can continue to run.
Some examples for such false detections:
WS.Reputation.1 is a detection for files that have a low reputation score based on analyzing data from Symantec’s community of users and therefore are likely to be security risks. Detections of this type are based on Symantec’s reputation-based security technology. Because this detection is based on a reputation score, it does not represent a specific class of threat like adware or spyware, but instead applies to all threat categories.
The reputation-based system uses "the wisdom of crowds" (Symantec’s tens of millions of end users) connected to cloud-based intelligence to compute a reputation score for an application, and in the process identify malicious software in an entirely new way beyond traditional signatures and behavior-based detection techniques.
As described above, it reports a potential risk without having detected a real virus, just because the number of installations of this version of my software is below a certain threshold at this time!
Kaspersky Total Security: UDS:Trojan.Win32
It creates a pseudo virus name and reports a hoax based on heuristics and number of installations.
Microsoft Defender: "Trojan:Win32/Azden.A!cl"
Another example of a false positive which uses a reputation score, that is resolved after enough users have flagged the application as secure.
Mc Afee: "Artemis..."
McAfee classifies unknown files (in this case a new Version of SIM Dashboard) which contain potential dangerous behavior (in this case: Readout of other Games data) as potential malware. This "Feature" is called McAfee Global Threat Intelligence (Artemis). In this case you need to add an exception to McAfee. If enough users have added such an exception the file is classified as secure.
Conclusion: Don't panic! This software is absolutely harmless und is classified as potential risk because of some required features (see above). In this case mark the SIM Dashboard application as secure amd create an exception. And now much fun while SIM Racing
virustotal.com is an easy way to check an sofware online for virus and malware. Select the tab URL on the virustotal.com Website and enter the link to the current installation paket there to run a check.
Still questions? Write me an email to: info(at)stryder-it.de
Older Versions of the Application are usually already flagged as secure. If you have problems with the latest version, try to install the previous Version and don't update until the latest version is out for some time.